Local-first is the security model.

The app makes no network calls. There is no server to breach, no account to hijack and no sync channel to intercept. The most effective way to protect your data is to never move it.

Inventory only reads the files your AI tools create. It never writes to them, and it reads live databases through a private snapshot so indexing can never interfere with the tool that owns the data.

Everything Inventory stores lives in one file in your Application Support directory, protected by your macOS user account like the rest of your home folder. Anyone with read access to your home directory could read it, which is true of your conversation history whether or not Inventory is installed.

Found a security issue? Email hello@myinventory.site and we will treat it as the highest priority.