How Locai OS is secured

This page is for security, procurement, and technical leadership reviewing Locai OS on Locai One.

Locai OS is a single-organisation system. Inference and stored work stay on Locai One. Locai Labs does not receive prompts, replies, files, or model weights unless an administrator starts a support session.

Trust boundary

Control	Behaviour
Organisation	One organisation per Locai One. Accounts are local to that Locai OS.
Data at rest	Stored data is encrypted and bound to this Locai One.
Data in transit	The Locai App, Admin Console, and Locai API use HTTPS.
Public internet	Off until an administrator enables it. That covers updates, a public certificate for the public domain, and approved support.
Identity	Unique accounts. Password plus an authenticator app. No default or shared password.
Locai API keys	Issued to an account, shown once, revocable.
Support	Locai can connect only during a session an administrator starts. The session ends when the duration expires, or when the administrator selects End access.
Certifications	Locai Labs is certified to ISO/IEC 27001 and Cyber Essentials.

Network and certificates

On the office network, Locai One is reached at https://locai-<id>.local/. HTTPS on that name is issued by Locai One. The Locai App confirms that certificate when it first connects. For browsers opening the Admin Console, install the certificate from Network on managed devices.

If you turn on the public domain, that name uses a publicly trusted certificate. Do not ask users to ignore certificate warnings.

Guest Wi-Fi, a phone hotspot, and a VPN usually cannot reach the office-network address. That is expected.

Identity and keys

Administrators and users authenticate to this Locai OS. An authenticator app is required. Users without admin access cannot open the Admin Console.

Treat Locai API keys as secrets. Revoke a leaked Locai API key and create a replacement. Treat chat and files as organisation records, as you would email.

Support access

Remote support is off until an administrator approves it in Privacy & support, then Support. Access is time-limited. Select End access when the work is finished. A diagnostics report can be downloaded without granting remote access.

Operational limits

There is no backup product. A factory reset on Settings → Power removes accounts and stored work. Keep copies of anything you cannot lose. See Power.