Security & privacy
Australis is a desktop app, and that's the security model: local first, your disk, your keys, receipts for everything.
Your code stays on your machine
Projects are plain folders in a location you choose (~/Australis by default). Builds and previews run locally. Nothing leaves your computer unless you deploy or share it yourself.
Model calls, and only model calls
When you build with a cloud model, the prompt, the plan, and the relevant project files are sent to that model's API — Claude by default, or the provider whose key you brought. Keys live in your local .env, never on our servers. The bundled sample runs a full verified build entirely offline.
Sandboxed builds
Generated code is built and booted in an isolated sandbox before it's ever marked verified. The verifier is independent of the model that wrote the code — the checker can't be sweet-talked by the builder.
No destructive surprises
Deleting a project moves it to the OS Trash — recoverable, never a hard delete. Agent changes in Code view are proposed as diffs you accept or reject, file by file. Every save is confirmed only after the bytes are on disk.
Telemetry is opt-in
The beta ships with crash reports and usage metrics off. If you opt in, reports are anonymized and never include your code or prompts. See the privacy policy for the details.
Found something? Report vulnerabilities to security@australis.io — we respond within 48 hours.
