Your work never becomes our data.

• Your files stay in the folders you add, in their own formats. Objentra reads them where they are.
• Objentra's index, links, comments and version history are stored in your computer's user folder, protected by macOS like the rest of your files. Turn on FileVault to encrypt them at rest.
• API keys for AI providers are kept in the macOS Keychain, never in a settings file.
• Deleted items go to Objentra's Trash for 30 days, so a mistake is never final.

Sync uses a folder in the iCloud Drive, Dropbox or Google Drive you already have, or a direct connection between computers on the same network. Objentra never runs a sync server.

• Encryption. Everything Objentra writes for sync is encrypted on your computer with AES-256-GCM, under a random 256-bit key for your workspace.
• Signed changes. Each computer has its own X25519 and Ed25519 key pair. Every change is signed by the computer that made it, and a change that isn't signed by a trusted computer is ignored.
• Your recovery code. A new computer joins with a recovery code shown once when you turn on Sync. It unlocks the key; it isn't the key itself, and we never see it. If you lose every computer and the code, we cannot recover your synced data.
• Removing a computer. Remove a lost computer and your other computers move to a new key it doesn't have.
• On your network. Computers on the same network talk over an encrypted Noise channel, keyed from your workspace key.

What Objentra does not encrypt

Your own files stay in your folders as they are. If those folders are in a cloud drive, the cloud service protects them, along with their names and folder structure. For iCloud Drive, we recommend turning on Advanced Data Protection in System Settings › Apple Account › iCloud, which encrypts iCloud Drive end to end. In the sync folder itself, device ids and the size and time of each file are visible to the cloud service; their contents are not.

• You choose where AI runs. Use a model on your computer and nothing leaves it. Or add your own key for a provider you trust; text is sent straight from your computer to that provider, never through us.
• Privacy Shield. Before anything goes to a cloud provider, Privacy Shield can replace names, emails, numbers and other details with placeholders, and puts them back when the answer returns.
• Suggestions, not changes. AI proposes links and properties with the sentence that proves them. You approve each one, and you can undo any AI action later.
• On the record. Every AI action is listed in AI activity. Export a signed AI report to show a client or auditor exactly what AI did, and when.

Claude, Cursor, VS Code and other apps can read your Objentra files through a small helper on your computer. It never opens a network port.

• Off by default. Nothing can connect until you turn it on, and each app must be allowed once, by you.
• Only the genuine helper. Objentra accepts connections only from its own signed helper, running as your macOS user.
• Your scope. Choose the folders apps can read. Original file bytes and file paths are never handed over; apps receive text, and page images if you allow them.
• Suggest, never edit. Apps can suggest links and properties for you to approve, and can create new notes in a folder of their own. They can't edit, move or delete anything.
• Limits and a log. Requests are rate-limited, and every read and suggestion is recorded in AI activity under the app's name.

What you share with an AI app is then handled by that app and its AI provider under their own terms. Privacy Shield does not apply there, because the app needs to show you what it read.

• Objentra is signed with an Apple Developer ID and notarized by Apple, so macOS can confirm it comes from us and hasn't been changed.
• Updates are delivered over HTTPS and cryptographically signed. Objentra refuses to install any update whose signature doesn't match ours.
• Crash reports help us fix bugs. They're on by default and you can turn them off any time in Settings. They carry your computer's name, and we strip file names and paths from error messages. A replay of the app window, with every word, picture and input masked, is sent for one session in ten and for every session with an error. A crash in the app's native code is sent as a memory snapshot, which can hold fragments of what the app was working on. Reports are stored by Sentry in the EU, without your IP address.
• No advertising, and no analytics on this website; in the app, only the crash reports above. This website sets no cookies.

Objentra is young and made by a small, independent team. We haven't commissioned an independent security audit yet; we plan to once Sync and AI apps have settled, and will publish the results here.