Security

On your computer

Every session is Claude Code, running on your own computer and signed in to your own Claude account. Each ticket gets its own folder under the app's data folder, and the session starts there. What a session may do is up to Claude Code's own permission modes, chosen per workflow: auto mode's safety checks, or asking before every tool. Neither is a sandbox, so give sessions the access you would give a colleague at your keyboard.

The app

The Mac app is signed with an Apple Developer ID and notarized by Apple. It updates itself from the same signed releases, and the updater checks the signature before an update installs.

The Linux package is not signed. It is published in the same releases as the Mac app, and before an update installs, the updater checks that it is the file that release lists.

In the service

• Your account, your workspace and the files sessions save are stored as the privacy policy describes.
• Each workspace has a database of its own.
• Passwords are kept only as a hash, and your Linear key is encrypted.
• The site, the web app and its API are served over HTTPS only.

Reporting a vulnerability

Email support@develcentral.com with what you found, how to reproduce it, and the version of the desktop app if the issue is there. We reply within a few days and tell you when it is fixed. Our security.txt has the same contact. Please give us time to fix an issue before you publish it, and do not test against other people's accounts or data.

What we don't do

• No remote access to your computer: the service cannot run commands there. Your app starts sessions itself, from the workflows on your board.
• Your code stays between your computer and Anthropic: sessions run on your computer under your own Claude account. What reaches our service is what a session reports to its ticket: its status, its summary and the files it saves.
• No selling or sharing your data.