Security & privacy
Australis is a desktop app, and that's the security model: local first, your disk, your keys, receipts for everything.
Your code stays on your machine
Projects are plain folders in a location you choose (~/Australis by default). Builds and previews run locally. Your project folder stays on your machine; what does leave it is listed in the next card and in the privacy policy.
Model calls, and only model calls
When you build, the prompt, the plan, and the relevant project files are sent to the model through the Australis control plane, on our keys — Claude writes the code. There is no key for you to obtain, paste or store. The project folder, the build and the preview stay on your machine.
Checked builds, a fenced-in agent
Generated code is built and booted from a clean install before it's ever marked verified, and the verifier is independent of the model that wrote the code — the checker can't be sweet-talked by the builder. On a Mac, every command the code agent runs goes through a macOS sandbox that can't read your SSH keys, cloud credentials, keychains, browser data or other tools' tokens, and package installs don't run install scripts. On Windows the agent's commands aren't fenced in that way yet.
Signed downloads
The Windows installer is code-signed by Australis Technologies Pty Ltd, so Windows names us as the publisher — check that name before you run it. The Mac app is signed with our Apple Developer ID; while Apple moves our developer account into the company's name it isn't notarized yet, so macOS asks once and you choose Open Anyway in System Settings › Privacy & Security. Every download shows its SHA-256 checksum.
Signing in
Sign in with Google, with Microsoft, or with a one-time code we email you — there is no Australis password to leak. One email address is one account, whichever way you come in.
No destructive surprises
Deleting a project moves it to the OS Trash — recoverable, never a hard delete. Agent changes in Code view are proposed as diffs you accept or reject, file by file. Every save is confirmed only after the bytes are on disk.
Telemetry is opt-in
The beta ships with crash reports and usage metrics off. If you opt in, reports are anonymized and never include your code or prompts. See the privacy policy for the details.
Found something? Report vulnerabilities to security@australis.io — we respond within 48 hours.
