Security

Own 1 and OwnOS are built to run models and agents on your own hardware. Personal memory, documents and workflow state live on the device, so the default path for sensitive data is one that never leaves it.

Data is encrypted in transit with modern TLS and at rest on supported devices and storage backends. Keys used to protect personal memory are held by the owner of that intelligence.

When work is routed to a cloud or third-party model through OwnCloud or OwnAI, requests are scoped to the minimum context required, and providers are treated as interchangeable and untrusted by design.

Least-privilege access to production systems, dependency scanning on every build, and review of changes that touch authentication, storage or routing.

If you believe you have found a vulnerability, email ashton.h@ownx.co with steps to reproduce and any supporting detail. Please give us a reasonable window to investigate and remediate before publishing. We will acknowledge your report and keep you updated, and we credit researchers who ask to be named.