orren
Start free trial
Security

Where your data lives, and what leaves the Mac.

A claim like “your data is safe” needs a page behind it. This is that page, and it lists every path, including the ones we would rather not have to explain.

Stays on your Mac
  • The master copy of everything: canvases, notes, captures, leads, conversations, calls, payments, files.
  • Dictation and meeting audio, transcribed on the Mac by Apple's speech engine. Never uploaded.
  • Your sign-in session and your Google and Calendly tokens, in the macOS Keychain.
  • Anything you mark guarded, and anyone you hide.
Goes to Orren's servers
  • A synchronised copy of your records, so the brain can answer across all of them.
  • The questions you ask, and the context assembled to answer them, to the model.
  • Your Instagram and Notion tokens, held on the server so messages send and syncs run without your Mac open.
  • Diagnostics: version, counters, error codes. Never what you typed.

How it is built

Everything in transit is TLS. Everything at rest on Google Cloud is encrypted by Google.
Every customer's rows are separated by database row-level security that binds every role, including administrative ones.
Platform tokens on the server are never returned to the app or shown in any interface.
The release build runs a census of every network path in the app and refuses to build if one is undeclared.
The app is signed with an Apple Developer ID and notarised. Updates are signed and verified before they install.
Every deploy runs a suite that checks no response leaks a token, a model name, another customer's data, or internal detail.

What we would rather not have to explain, explained.

The AI runs on Orren's own accounts with Google Vertex AI, not on a key you supply. Google's terms for Vertex AI do not allow it to train on customer content, and neither do we. Orren's servers are in the United States. A lapsed licence pauses the AI and nothing else; your records stay until you ask us to delete them, and you can export them at any time.

Found something? Read the security policy and write to josh@conquermental.com. The full privacy policy and subprocessor list say the rest.