What leaves your machine

Hosted models answer better and faster; local ones send no document text anywhere. Proxyma works with both, so try your own questions on each.

Only what you could change yourself, with your own access. Writing is off for each connection until you turn it on. In Ask mode each change waits for you, and is denied after five minutes without an answer.

It can be misled, as a person can. Guardrails hold back retrieved text that carries instructions for an assistant, but pattern checks catch copied attempts, not every rewording. Assistants connected over MCP are not asked before a change: a connection's Write switch applies to them directly.

Credentials, personal data and planted instructions, by pattern, with no model and no network. Monitor mode runs every check and applies none. They do not decide who may read what: accounts and sources do.

90 days by default, model calls for a year. They download as CSV or JSON, and the text a guardrail matched is never written to disk.

It is not code-signed, so SmartScreen may warn the first time. Check that it came from this page, then choose More info, Run anyway.