Not in the five apps: your code, repositories, clusters, terminal output, and databases are never sent to OpenEng. Each engine runs locally, listens only on 127.0.0.1, and the web app seals every frame of its session with the engine. What you point an app at yourself — your SSH hosts, clusters, forges, MCP servers, connectors, or an external model server for Chat — receives what you send it.
In OpenEng AI, your files are read and processed on your machine, but anything that appears in a conversation — your prompts and the engine’s replies, which can quote your code — passes through the OpenEng Broker, which can read the prompts and the thread history and keeps it for 7 days by default, and a hosted model you choose receives what you send it. Local models run on your machine — the built-in models in the engine’s enclosed model daemon, catalog models in your local Ollama — and a hosted model is used only for a role you point at one (the Console’s default planner option, the included Cloud Planner, is one). The browser Web Console is a thin client that holds no model, and a vault value you type is never read back by a browser. What you type there travels encrypted to the OpenEng Broker, which opens each request to route it to your engine. The engine’s streamed replies are sealed end to end, so the Broker cannot read them. The engine data the Web Console loads — your thread list and history (past prompts and answers, which can quote your code), learned memory, the running config, placeholder names, and loop, warm-up, and device status — is sealed to the Broker, which opens it to deliver it. The Broker keeps everything it routes for a retention window (7 days by default), then deletes it.