security
Built for code that cannot leave the building.
Banks, exchanges, defence, healthcare, anyone shipping under NDA. The answers your security
review will ask for, in one place.
the whole request log~/.twinny/server/usage/
timecapkeyaliasresulttook
10:12:03 fim alice coder ok 412ms
10:12:04 chat bo chat ok 2.1s
10:12:06 fim alice coder ok 388ms
10:12:09 embed chen embed ok 61ms
10:12:11 chat dana chat timeout 30.0s
10:12:12 fim eli coder ok 402ms
Every field, by default. Content recording is a separate switch, and it is off.
hosted assistant vs twinny
| hosted | twinny |
|---|
| Where prompts go | A vendor’s cloud | Your own servers |
|---|
| Whose GPUs | The vendor’s | Yours, or pooled from the team |
|---|
| Who picks the model | The vendor | You |
|---|
| Telemetry | On by default | None. There is no endpoint. |
|---|
| Air-gapped | No | Yes |
|---|
| Per seat, per month | Typically $19–39 | $0 to $25 |
|---|
- Does anything leave our network?
- No. The extension talks to the server you configure and the gateway talks to its backends. No update check, no crash reporter, no usage ping, no licence check. It runs air-gapped: Node 18 and your inference server are the whole dependency list.
- Is pooling teammates’ computers safe?
- The sharer connects out to the gateway with their own key; nothing dials in. Prompts stream through the machine and are not stored there. Developers are told which models may run on a teammate’s computer, and admins can disconnect any of them.
- What is recorded?
- By default, metadata: time, capability, key, alias, outcome, duration. Content is a separate switch per feature, off unless an admin turns it on, kept on your gateway, disclosed to developers and deleted after the retention you set, 90 days by default.
- How are keys handled?
- One per developer, shown once, stored as a hash, revoked live. Requests name a model alias; they cannot carry a URL, credential or path.
- Can we control what developers use?
- Yes. Policy restricts which provider kinds may be added and locks the team models, enforced inside each developer’s VS Code.
- Can our security team read the code?
- All of it. The extension and the gateway are one MIT repository. The private piece is the licence issuer, and it only signs seat counts.