Australis is a desktop app, and that's the security model: local first, your disk, your keys, receipts for everything.
Projects are plain folders in a location you choose (~/Australis by default). Builds and previews run locally. Nothing leaves your computer unless you deploy or share it yourself.
When you build, the prompt, the plan, and the relevant project files are sent to the model through the Australis control plane, on our keys — Claude writes the code. There is no key for you to obtain, paste or store. The project folder, the build and the preview stay on your machine.
Generated code is built and booted in an isolated sandbox before it's ever marked verified. The verifier is independent of the model that wrote the code — the checker can't be sweet-talked by the builder.
Deleting a project moves it to the OS Trash — recoverable, never a hard delete. Agent changes in Code view are proposed as diffs you accept or reject, file by file. Every save is confirmed only after the bytes are on disk.
The beta ships with crash reports and usage metrics off. If you opt in, reports are anonymized and never include your code or prompts. See the privacy policy for the details.
Found something? Report vulnerabilities to security@australis.io — we respond within 48 hours.