# Ownbox security and privacy

Updated: 2026-10-17

# Ownbox security and privacy

What stays on an Ownbox, what goes to the AI provider, and who controls what. Updated 2026-10-17.

## Where does my data live?

On the Ownbox's own server. Everything an Ownbox knows lives in one database file there, and everything on it exports in full.

## Does my data go to Ownbox?

No. AI calls go to the owner's own AI account, Claude or ChatGPT, not to Ownbox. Ownbox never bills for AI.

## What goes to the AI provider?

Only the text the AI needs to draft, sent to the owner's own AI account under the owner's own terms with that provider. Before signing in, the owner confirms they have reviewed their AI app's terms.

## Can the AI run on my own hardware?

Yes, on Enterprise. It adds a dedicated GPU server running an AI model locally, so the business's data never leaves its own hardware.

## Who can get in?

- **Logins:** everyone signs in with their own login.
- **Access:** the owner invites people, decides what each one can use, and revokes access. A revoked person is out on their next click.
- **AI agents:** they connect through the Ownbox MCP server, locked with a token only the owner holds.

## Can an AI agent act without permission?

No. Anything an AI agent wants to do on an Ownbox waits for a person's OK, and every action is logged. The owner can let a channel answer on its own and switch that off again.

## Is there a spending limit on AI?

Yes. A cost guard holds a hard monthly ceiling on anything billed per use, such as an API key.

## What about backups and updates?

Managed Support installs every update, monitors the Ownbox and keeps daily backups.

## Who owns the code and the data?

The owner. An Ownbox can be moved to the owner's own DigitalOcean account whenever they want, and it runs there without Ownbox.