Built to be trusted with your code.
Last updated
You’re handing a folder to thirteen agents. Here’s what they can touch, what leaves your Mac, and how you get back to where you were.
Your code stays on your Mac
Projects, chats and checkpoints live on your Mac. We don’t run servers that see them.
Agents stay in the project
They can only change files inside the project folder, and can’t read or change .env files at all.
Every change can be undone
A checkpoint is saved before every run and every step that changes files.
What leaves your Mac
Only what an agent needs for the job in front of it, and only to the provider you picked. With a local model, nothing from your projects leaves at all.
Stays on your Mac
- Your projects and files
- Chats, tasks and checkpoints
- Settings and API keys, encrypted with macOS key storage
- Workspace backups you save
The AI provider you choose
- Your messages to the agents
- Files, or parts of files, the agents read
- Attachments and visual-check screenshots
Commandr
- Your email address and name
- A check that your account is active
- Nothing from your projects
The full detail is in the privacy policy.
What agents can and can’t do
They can
- Read the files in your project folder, except .env files
- Write files there — Frontend, Backend and Database write code, Test writes tests and Document writes docs
- Run your project’s scripts, once you allow it for that folder
Planning agents work in the chat. Check, Debug and Sync only ever read.
They can’t
- Change anything outside the project folder
- Change the paths you protect in Project settings
- Run scripts or install packages until you turn on project commands
- Rewrite your branch, staging area or git history
When scripts do run, they run in a macOS sandbox that keeps them away from the rest of your files, and build and test scripts can’t reach the internet. More about project commands
And the rest
Your API keys
Encrypted with macOS key storage, only ever sent to the provider they belong to, and never put in backups.
Undo anything
Restore any of the last 60 checkpoints in a project, and see which files change back before you do. How it works
Checked updates
Every update is checked against the release’s published checksums before it’s installed.
No tracking
No ads, analytics or crash reporting — in the app or on this site. We never sell your data.
Found a security problem?
Email support@commandr.dev with what you found and how to reproduce it. We reply within 24 hours. Please give us a chance to fix it before you share it.