Your code stays on your Mac.
Rig runs development servers on your Mac and does not upload your source code, git history or .env files. Rig Cloud is optional and stores your setup's shape: device details, project names and settings. Continuity backups and vault secrets are encrypted on your Mac with a key we never hold. AI agents connect to a local MCP hub with a token and must ask before pushing, sharing, restoring or acting on another Mac; what an agent reads goes to its AI provider. Live Link traffic passes through Rig's relay while a link is on. Mesh uses Tailscale and WireGuard with a Rig-run coordination server. Report vulnerabilities to security@userig.app; we reply within two working days.