--- title: "Private AI Security · AssistantGeneral" description: "Encryption at rest, a PIN lock, a tamper-evident audit log you can verify, retention limits, sandboxed web pages and file tools, and no telemetry at all." url: "https://royalsoftworks.com/products/assistant-general/features/privacy-and-security/" source: "https://royalsoftworks.com" format: "markdown" note: "Markdown rendering of the HTML page at `url`. Same content, same canonical URL." --- Features · Security and administration # Locked down on the machine it runs on. Encryption at rest, a PIN lock, a tamper-evident audit log you can verify, retention limits, sandboxed web pages and file tools, and no telemetry at all. [Editions](https://royalsoftworks.com/products/assistant-general/editions/): Encryption is on in every edition. The PIN lock, audit and retention settings: Pro and up. ## Privacy and security, feature by feature Each comes with a small drawing of how it works. They are diagrams, not screenshots; numbers in them are examples. - ### Encrypted on disk Settings and chats are encrypted with a key sealed by your operating system's keychain. For your IT team: AES-256-GCM; the data key is wrapped by the OS credential store. Diagram: Chats + settings → AES-256 → Key in the OS keychain. - ### The knowledge base too On Windows the knowledge-base folders are encrypted by the system's own file encryption. Where that is not available, the app reports whether the disk is encrypted, and says plainly when it is not. For your IT team: EFS, or BitLocker / device encryption reported. Diagram: Knowledge base leads to EFS: encrypted, BitLocker: reported, Neither: says so. - ### A PIN lock Ask for a 4 to 6 digit PIN every time the app starts. Diagram: App starts → PIN 4–6 digits → Unlocked. - ### An audit log you can verify Each record is chained to the one before it, so changing, removing or reordering any record shows. A button checks the whole chain. Diagram: Record 1 → Record 2 → Record 3 → Verify ✓. - ### You choose what is logged Model use and document access can each be recorded, with a retention period and a size limit. Checklist: Model use (yes), Document access (yes), Retention, size limit (yes). - ### Retention limits Chat history and the document library can each be cleared automatically after a number of days. Timeline (Cleared after the days you set): Day 0, Day 30, Day 60, Cleared. - ### Web pages kept apart Pages it reads are opened in a sealed window that cannot reach the app or your files. Diagram: Web page → Sealed window → Text to the assistant. - ### File tools kept in their folder File tools work inside the working folder you choose, and any folders you add, and cannot climb out of them. Diagram: ../../x, then “Inside the folder?”: yes, Allowed; no, Refused. - ### No telemetry No usage tracking and no application log. A crash leaves a local file with no chat content in it. Diagram: No usage tracking and no application log; only a local crash file with no chat content. - ### Wipe it Clear the document store, clear all chats, or delete everything and start over. Diagram: Clear documents, Clear chats, Delete everything. [Security, in detail](https://royalsoftworks.com/products/assistant-general/security/) ## Goes well with - [Offline mode](https://royalsoftworks.com/products/assistant-general/features/offline-mode/) - [Backups and data](https://royalsoftworks.com/products/assistant-general/features/backups-and-data/) - [Admin console](https://royalsoftworks.com/products/assistant-general/features/admin-console/) [Previous Messaging bridges](https://royalsoftworks.com/products/assistant-general/features/messaging-bridges/) [Next Offline mode](https://royalsoftworks.com/products/assistant-general/features/offline-mode/) [All 31 feature classes](https://royalsoftworks.com/products/assistant-general/features/)