What Agent stores
Agent stores your organization's work, settings and knowledge. It never reads or stores your Claude or ChatGPT logins, and the runner sends facts about your folders, not their contents.
What Agent storesLink to What Agent stores
- your organization, members, workers and settings;
- work items, their threads, plans, checks and evidence;
- conversations with the CEO and Ava;
- memory, documents, business data, lessons and rules;
- the business brief and brand you accepted;
- model call records and spend;
- the audit log.
What the runner sendsLink to What the runner sends
- Each CLI's sign-in state: signed in or not, the method and the plan name. Never the email, organization or folders that the CLI prints.
- For each folder it finds or connects: the name, the folder under your home folder, the remote without any password, the default branch and recent commits. Never file contents.
- For a task: its own events, the files the CLI changed and usage. Token-shaped text is removed first.
What Agent never readsLink to What Agent never reads
- Your Claude or ChatGPT login. The runner never opens files under
~/.claude,~/.codexor their configured folders, and never sends them. - Pages behind a login during the website import.
Your personaLink to Your persona
Your persona is private to you. It is never exported or shared with your organization. See Your persona.
Checked against the product on 2026-10-05.
Was this helpful?
Related articles
- Secrets and credentialsAgent encrypts keys and tokens in a vault. It shows only a short hint, never the full value, and never sends a secret out.
- Export your dataAn owner or admin can export the workspace: work, memory, documents, workflows and workers. Logins and credentials are never exported.
- Local repositoriesConnect a Git folder on your computer through the runner. Work on it runs on your computer with your own git access. A folder needs a GitHub or GitLab remote before workers can change its code.
- The website importAgent reads your public website to suggest your brief and brand. It respects robots.txt, reads public pages only and saves nothing until you continue.