Trust center
The guarantees below are cheap to make and expensive to keep. They are written as constraints on the product, not as marketing.
No external API call is made by this studio, ever. The foundation exists to prove schemas, approvals, retries, idempotency, and logs before real credentials exist.
Inputs matching token, password, secret, or key are blocked from local logs. The run inspector never shows you something you should not have typed.
Read, write, and destructive actions have distinct gates. Destructive steps cannot simulate without per-step approval.
Connection records state that an account was connected outside the studio. No token is seen or stored. Expired claims block the runs that depend on them.
Everything lives in your browser's local storage. Clearing site data deletes the workspace. There is no server copy to anonymize later.
No analytics SDKs, no session recording, no third-party pixels. The only network requests are fonts and the static files of the site itself.
Delete
The trust view inside the studio has a one-click delete for the whole local workspace. Because there is no server, there is nothing left behind. Deletion is immediate and total.