Security & data

Know where your work lives.

Local terminal work stays on your Mac. When you use a cloud workspace, the code you send runs on Murmello’s infrastructure in AWS in the United States.

Project storage and shared home

Each workspace runs in a container with its own encrypted project disk. Its ~/pods directory belongs to that workspace. Your home outside that directory, including agent installations, settings and saved history, is shared across your account’s workspaces. Separate workspaces are not separate security boundaries from other workspaces in your own account.

Your Mac’s files are not synchronized automatically. You choose what to transfer through Git, Push, file upload or the File Manager.

Connections and credentials

The account API uses HTTPS; terminal connections and Git transfers use SSH. Workspace disks, shared agent storage and the account database are encrypted at rest.

Credentials saved through the Keys panel are encrypted using AWS Key Management Service and bound to your account. Keys made available to your workspace can be used by programs and agents running there. Agent sign-in also persists in the account’s shared agent storage. Give tokens only the access your project needs.

Coding agents and your code

Claude Code and Codex connect to their own providers when you use them. What they send and how it is processed depends on the provider, your account and your settings. Murmello’s cloud storage does not make agent requests local or offline.

Dictation

Hosted dictation sends microphone audio through Murmello’s service to ElevenLabs for transcription. Murmello holds audio in memory during the utterance and returns the text without retaining audio or transcripts. Usage duration is recorded to meter your allowance.

Retention and deletion

Stopped project disks are retained, archived and eventually deleted according to your plan’s retention windows. Deleting a workspace removes its project data; shared agent settings and history belong to your account and are separate.

For account deletion, contact support@murmello.ai. Keep important work in your own repository or on your Mac; cloud workspaces are working environments with retention deadlines.

Details and contact

Read the privacy notice and subprocessor list for the full policy and providers. Report a security concern privately to support@murmello.ai; do not include passwords or API keys in your message.