TRUST & TRANSPARENCY
Trust is earned in the open.
Privacy products shouldn't ask for faith. Here's exactly what we do and don't do, in terms you can check yourself.
What leaves your device
The short version: almost nothing. Here's the full accounting.
Your prompts & files
Processed on-device. Sensitive values are cloaked with format-preserving encryption before anything is sent to YOUR configured AI provider.
Detection results & counters
Stay in local files on your machine, with owner-only permissions.
Telemetry / analytics
None. There is no channel for it — nothing to opt out of.
Your data to Sonomos servers
Nothing. We don't have servers that receive it.
This website
Static pages. No cookies, no tracking — just anonymous analytics to keep things running. See our no-tracking policy.
How we make money
Canary is free because Locke is the business. No ads, no data resale, no "free product where you're the product." We don't sell data and we have no data to sell — the processing that matters happens on your machine, not ours.
Check our work
Don't take "zero network requests" on faith. Read the code, or watch the CI enforce it.
Canary is MIT-licensed and open source
Read every line, run it yourself, or fork it.
github.com/sonomoshq/CanaryZero network requests, enforced mechanically
"No network requests" isn't a claim in a README — it's a check CI runs on every commit, not a promise we're asking you to believe.
Where we are, honestly
Our engineering repos keep an HONEST.md file listing what isn't true yet. We'd rather under-claim than let a gap surprise you later — so here's the same honesty, in public.
Locke is pre-1.0. It hasn't yet undergone a formal third-party security audit or a SOC 2 Type II audit. Both are planned.
Our claims are backed by reproducible benchmarks, not certifications — for now. You can run the same benchmarks we do, straight from the repos.
Report a vulnerability
Found a security issue? We welcome responsible disclosure and commit to responding. See our security.txt for the formal policy.
Ready to see it for yourself?
