Security & trust

Your context stays yours

Kodela captures some of the most sensitive knowledge in your organization — the reasoning behind your code. It's built local-first, self-hostable, and governed, so that knowledge never leaves your control.

Posture

Designed to be trusted with your reasoning

Local-first by default

The community core runs entirely on your machine with SQLite storage. No account, no telemetry required for single-developer use.

Your context is not a data product

Kodela is infrastructure for your knowledge. We don't train models on your code or context — it stays in storage you control.

Encryption & access control

Context at rest is protected, and Enterprise RBAC governs who can read, author, and approve at a per-action granularity.

Self-hostable storage

Run on SQLite locally or Postgres you operate. Your data lives where your code already lives.

Attribution you can trust

A six-layer attribution pipeline records which actor — human or AI tool — made each change, as ground truth.

Air-gapped option

For regulated environments, deploy fully disconnected with private-LLM enrichment and no outbound traffic.

Disclosure

Report a vulnerability

We take security reports seriously and welcome responsible disclosure. Review our policy or reach out directly.