Security model
Learn what runs locally and what is sent to a selected model provider.
Repository access, Git operations, worktrees, terminals, local agent processes, browser interaction, and App session state run on infrastructure you control.
Model prompts, selected context, tool definitions, and generated output are sent to the provider selected for that task. Codius service metadata includes organization identity, model selection, usage totals, timing, request identifiers, errors, and billing records.
Read the complete security explanation and App security guide.
Last reviewed 2026-07-28 · Capability verified · Public docs are adapted and capability-checked before publication.
Provenance: apps/web/content/docs/start-here/security.mdx from CodiusAI/codius at working-tree.