Security and Data Flow

What stays on your computer

The xSquads app runs on your machine. Your files and folders are read and edited in place. We do not copy your folders to an xSquads server.

What leaves your computer

Bots are powered by AI engines, which are cloud language model services. When a bot works on a task, the prompt and any file content it needs for that task (for example an excerpt or the contents of a file it was asked to edit) is sent to the engine handling the task, and the response comes back.

That content is processed under the engine provider's terms, including its retention policy. If a file must never reach a cloud model, do not give the squad access to it.

Human approval

Bots propose edits as reviewable cards. Nothing is treated as final until you approve it, and irreversible actions are escalated to you instead of being executed.

Report a vulnerability

If you find a security issue, email [email protected] with the details. We will acknowledge your report and work with you on a fix before any public disclosure.