Where your data lives, and who can reach it.

Your personal vault is plain files in a folder on your computer, and the local database is encrypted on disk with SQLCipher. The app works with no account, and local AI keeps a conversation on your machine. If you sign in and sync, your pages and tasks are also stored on our servers and backed up daily. Cloud AI, the default once you sign in, sends your messages and relevant passages from your notes to our servers and on to Google's Gemini models. A shared workspace lives in our cloud so its members can reach it. The providers involved are listed under sub-processors.

A connector's sign-in is kept in your computer's keychain, and the app talks to the service directly from there. No shipped app stores connector sign-ins on our servers.

An agent's key reaches one workspace and is capped at viewer, commenter, or editor, so it can never manage members or delete a workspace. Revoking a key stops it on its next call.

A workspace can switch auto-approve on. Then a batch that clears that space's confidence floor is applied with nobody asked, and recorded as auto-approved. It is off until you turn it on.

Aurum holds no SOC 2 report, no ISO certificate, and no other third-party attestation.

Your vault is a folder and stays yours. Your account data exports on request, and you can delete your account yourself.

Email security@aurumtechnologyltd.com. Security reviews go to support@aurumtechnologyltd.com.