Download
Docs menu

Privacy and security

Tutti runs your agents on your own machine. Your code, prompts, diffs and terminal output never reach Tutti's servers. This page summarises how we protect the rest.

What stays on your machine

  • Your repositories, worktrees and branches.
  • Conversations with agents, teammates' notes and history, attachments.
  • Your agents' own logins and API keys: agents talk to their model providers (for example Anthropic or OpenAI) directly, under your accounts with them.

What the account service stores

Your email and sign-in identity, your devices, synced settings, consents, feedback, the days you used Tutti, support requests you send, and, only if you allow it, anonymous daily feature counts. It runs on our servers at OVH in Poland (EU). Export or delete everything from your account page. Details are in the privacy policy.

How Tutti protects your machine

  • Isolation: every piece of work runs in its own git worktree. Agents never touch your main checkout.
  • Approved commands only: commands from tutti.toml run only from your main checkout and only after you approve them. See Trust.
  • Agents ask first: by default agents ask before editing files and running commands, and text they read (a README, a ticket, a comment) can't make them run commands without asking.
  • Off limits: agents can't read Tutti's own data or common credential files, and each agent can read only its own project's attachments.
  • A locked-down local API: the core listens on 127.0.0.1 only, requires a token, and rejects requests from other websites.
  • Tokens in your keychain: the sign-in token is kept in the system keychain. Tutti never stores a GitHub token; pull requests use your GitHub CLI login.

Downloads

  • The macOS app and installer are signed with our Developer ID and notarized by Apple.
  • Every download has a SHA-256 checksum next to it, and the install scripts check it before installing.
  • Downloads are served over HTTPS from dl.tutti.build.

Reporting a vulnerability

Write to security@tutti.build (also in /.well-known/security.txt). We answer within two business days and credit reporters.

Legal

Privacy policy · Terms of service · End-user licence agreement. Companies on the Team plan can ask for a data processing agreement and the list of subprocessors through support.

Something missing or unclear? Ask us, and we'll answer and improve this page.