Skip to content
Download DNP
Security

Security & Data Handling

Your code stays on your machine. Agent traffic goes straight to the provider you configured.

Local by default.No server-side copy.

Canvases, briefs, diffs and terminal output stay on your machine.

Every statement here comes from the privacy policy and the product’s actual behaviour.

On your machine.Four guarantees.

Your workspace lives on your own disk, not in a hosted cloud environment.

The workspaceCanvases, briefs and revision history on your own disk.
The terminalsAgents run as the CLIs you already signed in to.
The filesRead from your project folders. Copies are not uploaded.
DeletionRemove the app and its data folders. No retention window.

Removing the app and its data folders deletes every workspace permanently.

What leaves.Five routes.

Only five kinds of traffic cross the network. Each destination is listed below.

Workflow diagram: network-routesNetwork routes: desktop CLI to provider; account and payments to Clerk and Stripe; analytics to PostHogAgent requests with credentialsSign-inPaymentsWaitlist emailPage viewsLane 01 / Desktop CLIStraight from your computer with your credentialsYour Computer (CLI)Claude Code or CodexSigned in with your accountConfigured ProviderAnthropic / OpenAI directlyDNP never proxies requestsLane 02 / Accounts & BillingSeparate sign-in and billing providersAccount & CheckoutEmail sign-in / Plan checkoutBrowser sessionClerk (Sign-in)Email address & one-time codeNo passwords storedStripe (Payments)Card details go directly to StripeNever reach DNPLane 03 / Website & WaitlistWebsite visits only · Not inside desktop appMarketing WebsitePage visits on dnp.softwareForms & download clicksDNP Waitlist EndpointEmail stored only for plan notificationNever sent to analyticsPostHog (d.dnp.io)First-party domain · Masked replaysAnonymous usage metrics
Workflow diagram: network-routes (mobile)Network routes: desktop CLI to provider; account and payments to Clerk and Stripe; analytics to PostHogAgent requestsDesktop CLI TrafficStraight from your MacTo model providerConfigured ProviderAnthropic / OpenAI directlyZero proxy logsAccounts & BillingClerk: sign-in emailsStripe: direct card processingWebsite AnalyticsWaitlist: internal endpointPostHog: self-hosted (d.dnp.io)Scope guaranteeNo website analytics inside app.No code or diffs on DNP servers.
Network routes: desktop CLI to provider; account and payments to Clerk and Stripe; analytics to PostHog
Agent requestsStraight to your provider. DNP does not proxy or store them.
Sign-inClerk holds your email address and one-time code.
PaymentsStripe holds the card. DNP keeps your email and subscription status.
Waitlist emailOur own endpoint, only to tell you when the plan opens.
Website analyticsPostHog on our own domain, with anything typed masked.

Website analytics runs only on this marketing site, never inside the desktop app.

Approvals.Human in the loop.

Agents do not run commands in the background without permission. Requests and decisions are recorded in plain-text transcripts on your Mac.

Enforced reviewer gates are planned for Pro. Feedback loops and transcripts are free today.

Report an issue.

Found a security issue in the app, this site or a dependency? Report it privately before publishing it.

Email [email protected] with the subject “Security report”. There is no bug bounty today, but verified reports are investigated immediately and credited.