Security & Privacy
Probably implements comprehensive security measures to protect your data, ensure privacy, and maintain the highest standards of information security.
Security Features
Section titled “Security Features”Local-First Security
Section titled “Local-First Security”Probably’s security model is built around local data processing:
- Local Processing: Data analysis happens entirely on your machine
- Standard Encryption: Uses HTTPS for external API communications
- File System Access: Standard file system permissions apply
- Simple Authentication: Basic API key management for AI services
Data Protection
Section titled “Data Protection”Local Data Security
Section titled “Local Data Security”File Storage
- API keys stored as plain text files in local cache directory
- Data processed using standard file system permissions
- Temporary files handled by operating system cleanup
- Cache directory follows platform conventions
Data in Transit
Section titled “Data in Transit”Network Communication
- HTTPS for AI provider API calls
- Standard TLS encryption provided by Python requests library
- Database connections use provider’s native encryption
- No additional encryption layers implemented
Privacy Protection
Section titled “Privacy Protection”Data Minimization
- Only relevant data context sent to AI providers
- Full datasets remain on local machine
- No automatic PII detection implemented
- Users control what data is analyzed
Access Control
Section titled “Access Control”Authentication
Section titled “Authentication”API Key Management
- API keys stored in local files
- Simple validation by testing provider endpoints
- Manual key rotation when needed
- Single-user desktop application model
Network Security
Section titled “Network Security”Communication
Section titled “Communication”Basic TLS
- Standard HTTPS connections to AI providers
- Uses Python requests library defaults
- No additional security layers
- Standard certificate validation
AI Provider Security
Section titled “AI Provider Security”Request Security
- Standard API authentication headers
- Basic rate limiting by providers
- No additional request signing
Logging
Section titled “Logging”Basic Logging
Section titled “Basic Logging”Application Logs
- Standard Python logging to cache directory
- Basic error and warning messages
- No security event monitoring
- Standard log rotation by OS
Privacy Benefits
Section titled “Privacy Benefits”Local Processing Advantages
Section titled “Local Processing Advantages”Data Control
- Data remains on your local machine
- No data uploaded to cloud analytics platforms
- Direct database connections when using external sources
- Users control what context is sent to AI providers
Data Recovery
Section titled “Data Recovery”Backup Considerations
Section titled “Backup Considerations”Local Data
- Data files remain in their original locations
- Standard backup practices apply
- Cache data can be regenerated
- Configuration stored in user cache directory
Security Best Practices
Section titled “Security Best Practices”User Guidelines
Section titled “User Guidelines”API Key Security
- Store API keys securely according to your organization’s policies
- Rotate keys periodically based on provider recommendations
- Use minimal permissions when configuring API keys
- Monitor usage through provider dashboards
Data Handling
- Follow standard file system security practices
- Use appropriate database security for external connections
- Consider network security when accessing remote databases
Data Locality
Section titled “Data Locality”Local Processing Benefits
Section titled “Local Processing Benefits”Geographic Control
- Data processing happens on your local machine
- Only query context sent to AI providers
- Users choose which AI providers to use
- No data stored on external analytics platforms
What’s Next?
Section titled “What’s Next?”Performance Benefits
Learn how local-first architecture delivers superior performance while maintaining security.
Scientific Method
Explore how Probably implements scientific rigor in data analysis workflows.