[rondar](/)

[Product](/)[Pricing](/pricing)[Demo](/demo)[Docs](/docs)[Contact](/contact)

[Sign in](/access#access-sign-in)[Request an invite](/access)

[Product](/)[Pricing](/pricing)[Demo](/demo)[Docs](/docs)[Contact](/contact)[Sign in](/access#access-sign-in)

# Security

How Rondar protects your conversations, code and credentials.

## What Rondar does

**Encrypted where it is stored**

Your conversations, code and credentials are encrypted wherever Rondar stores them: on disk, in the database and in backups.

**Encrypted on the way**

Everything travels over encrypted connections.

**Each session on its own**

Each session runs in its own isolated container. Each project has its own private Docker engine.

**Your code stays yours**

Your code lives in your GitHub. When you archive a session, Rondar deletes its files after 2 days and keeps no copy.

**Your provider account**

Agent usage runs on your own provider account. Rondar never sees your payment details for it.

## Who can reach your data

**GitHub access**

Rondar connects to GitHub with an OAuth app. When you connect a repository, it asks GitHub for these scopes: repo, workflow, read:org and user:email.

The repo scope gives Rondar read and write access to every repository that your GitHub account can reach, not only the ones you add. GitHub does not let an OAuth app limit this scope to chosen repositories. To limit it, connect a separate GitHub account that can reach only those repositories.

When you disconnect GitHub, Rondar deletes the token that it stores and tells GitHub to end the access. If GitHub does not confirm this, Rondar tells you to revoke Rondar in your GitHub settings.

**Live previews**

A preview opens only for the owner of the project and for a person who has its signed link.

A signed link works for 24 hours and needs no sign-in, so share it only with people you trust.

**Keys and credentials**

Rondar encrypts stored credentials with AES-256-GCM. Rondar holds the keys, not you.

You can delete a stored credential in Settings at any time. To end it at its provider too, revoke it there.

**Staff access**

The admin panel shows account details, project names, session counts and the feedback that you send. It does not show conversations, code or credentials.

Rondar records each page that staff open in the admin panel and each action that they take there. The application cannot change or delete these records.

Staff access in Settings shows you each record that names your account.

**Third parties**

Hetzner hosts the servers of Rondar and its encrypted backups.

GitHub holds your code. Stripe handles payments. Resend sends email. Google handles Google sign-in.

The agent provider that you connect gets your prompts and the code that an agent reads, on your own account and under its own terms. The same is true of a speech to text or image provider that you connect.

**Use of your data**

Rondar does not use your code or conversations to train models or for analytics.

Rondar counts page visits with Umami, which it runs itself, and it counts how the product is used, such as the sessions that start.

## What encryption does not cover

Rondar has to decrypt your code and conversation while an agent is working on them, on the server that runs the agent.

Encryption protects stored data: a drive that the datacenter replaces, a server that is given back, a backup file that leaks.

It does not protect against someone who breaks into the running server.

A person who can log in to the servers of Rondar can technically read your data, because the servers hold the keys. That access goes around the admin panel, so the staff access records do not show it.

Rondar holds no security certification, and no outside company has audited it.

A question about security? [Contact us](/contact).

[rondar](/)© 2026 Rondar

[Docs](/docs)[Pricing](/pricing)[Demo](/demo)[Rondar vs Amp](/compare/amp)[Rondar vs T3 Code](/compare/t3-code)[Rondar vs OpenHands](/compare/openhands)[Contact](/contact)[Security](/security)