Security & Privacy

Zero code training, an encrypted token vault, and execution isolation across Desktop and Cloud Studio.

BhaiCode is built so your code, credentials, and machines stay yours. Three guarantees underpin every page in this section.

No model training on your code, prompts, schemas, or metadata.

AES-256-GCM at rest, per-tenant keys, TLS 1.3 in transit.

Path denylists, approval gates, and ephemeral build containers.

How the controls fit together

Control	Desktop Workspace	Cloud Studio
Source code location	Your local filesystem	Ephemeral build containers
Secrets storage	OS keychain	Encrypted token vault (AES-256-GCM)
Command execution	Your shell, gated by the Transparency Dock	Isolated browser sandbox and short-lived containers
Context scope	Only files needed for the task; `.env` and `.gitignore` respected	Same, plus explicit `@file` pinning

Enterprise deployments can request zero-data-retention terms from upstream model providers. Contact the team for the current security summary.