Security

On your Mac

Every session is Claude Code, running on your own Mac and signed in to your own Claude account. Each ticket gets its own folder under the app's data folder, and the session works there. A guard in each session refuses its file reads and edits outside that folder, and shell commands that name a path outside it. The guard catches mistakes; it is not a sandbox, so give sessions the access you would give a colleague at your keyboard.

The app

The Mac app is signed with an Apple Developer ID and notarized by Apple. It updates itself from the same signed releases, and the updater checks the signature before an update installs.

In the service

• Your account, your workspace and the files sessions save are stored as the privacy policy describes.
• Each workspace has a database of its own.
• Passwords are kept only as a hash, and your Linear key is encrypted.
• The site, the web app and its API are served over HTTPS only.

Reporting a vulnerability

Email support@develcentral.com with what you found, how to reproduce it, and the version of the app if it is on the Mac. We reply within a few days and tell you when it is fixed. Our security.txt has the same contact. Please give us time to fix an issue before you publish it, and do not test against other people's accounts or data.

What we don't do

• No remote access to your Mac: the service cannot run commands there. Your app starts sessions itself, from the workflows on your board.
• Your code stays between your Mac and Anthropic: sessions run on your Mac under your own Claude account. What reaches our service is what a session reports to its ticket: its status, its summary and the files it saves.
• No selling or sharing your data.