Privacy starts in the architecture.
Four principles, applied to every product.
Four principles.
- LOCAL-FIRST
Privacy by architecture
Software runs on your device where possible; hosted features declare what runs there.
- ZDR
Data sovereignty
Your data is not the product. We don't build on journeys, agent memory, or profiles: if that changes, we'll say so.
- OPT-IN
No lock-in
Nothing sends by default. Every feature that leaves the device is yours to start: what's local stays yours.
- HONEST
Honest availability
Coverage, availability, and limits are stated per product. Unshipped work is marked unshipped.
The same principles, per product.
Where the limits are.
Zero retention
We don't log trips or agent memory. Hosts still see ordinary request metadata: pages, scripts, tiles.
Yours to enable
GPS and the hosted VSE endpoints are yours to turn on. Momentum stays local; Momentum Cloud runs in your cloud.
Enterprise
Coming soon. Organisation audit logs under contract are separate from product telemetry.