Your data & privacy

Your projects hold your private thinking, so Sandbox is built to keep it that way.

Encrypted at rest

The content you author — your notes and tool work, learnings, retrospectives, experiments, interview notes, and project summaries — is encrypted in the database. If someone ever got hold of a raw copy of the database, that content would be unreadable to them.

This is invisible in day-to-day use: everything you see, edit, search and export works exactly as before. The encryption sits underneath.

What Sandai (the AI) sees

Sandai reads your content to help you draft and advise — that's the point of a coach. By default it runs on a secure cloud model, which means the text you ask it to work on is sent to that AI provider to generate a response.

If you'd rather a project's content never leaves your own infrastructure, two controls help:

• Reference scope — limit how much Sandai pulls in for grounding (see Sandai's reference context).
• Private AI mode — an operator can run Sandbox against a local, on-premises model so nothing is sent to a third party at all.

Good practice

Encryption protects the database, not your account. Use a strong, unique password, and only invite people you trust into a project — collaborators can see the work you share with them.