Security
Local-first by default. Cloud features are opt-in.
Cosmos touches sensitive developer data, so the security model starts with a simple promise: indexing and memory run on your Mac by default, and source code is not uploaded just to make the app useful.
- Default mode
- On-device indexing and local storage
- Plus
- Local project workflows, not hosted sync
- Transport
- TLS for account and billing flows
- Disclosure
- cosmos@atitechs.com
What Cosmos indexes
- Project files, symbols, call relationships, docs, notes, and error+fix lessons from folders you choose.
- Terminal/runtime problems captured inside Cosmos when you run projects from the app.
- Metadata needed to route MCP tool results back to the right project scope.
What stays local
The code-aware index, memory database, and lessons are stored on the device by default. Connected AI tools query Cosmos over the local MCP bridge and receive bounded context instead of a full repo dump.
What is never uploaded by default
- Your source code.
- Your local notes and private folders.
- Your full codebase index.
- Terminal output from projects unless you explicitly use a flow that sends context to an AI tool.
Cloud roadmap
Hosted backup, hosted sync, hosted MCP, and cloud AI quota are roadmap services, not required for the current Free or Plus app experience. If a hosted service ships later, it should be opt-in and documented separately from the default local workflow.
Delete data
You can remove indexed folders and local data from inside Cosmos. For account, waitlist, or billing-related deletion requests, contact the support address listed on this site.