Trust boundary

AgentRail Privacy

AgentRail is local-first today. The public demo uses synthetic sample data, and the open-source stack runs on infrastructure controlled by the developer who deploys it.

Current local-only mode

The SDK sends spans to the configured AgentRail ingestion endpoint. Metadata is stored in PostgreSQL, and redacted evidence payloads are stored behind the backend. Browser clients do not access blob storage directly.

Metrics-only mode

A future hosted mode may support metrics-only reporting. That mode must exclude raw prompts, model responses, tool payloads, user secrets, database URLs, API keys, and object-store credentials.

Evidence sync mode

Evidence sync is not active in the public product. Before any hosted evidence sync ships, AgentRail needs explicit project controls for redaction, retention, deletion, and export.