Privacy and security FAQ

How do I control access?

Assign the USB to an owner, track sign-outs, and store it in a secure location when not in use.

Can multiple people share?

Yes, but log custody and keep sensitive prompt packs separate or encrypted.

Should I encrypt the USB?

Encrypt sensitive folders or the whole drive if policy requires; keep backups.

How to prove no data leaves?

Run in airplane mode, screenshot localhost and Resource/Activity Monitor showing no outbound traffic.

Do you collect telemetry?

No. PortableMind runs locally; telemetry is not sent.

What to share with auditors?

Offline proof, custody logs, AV exclusions scope, and cleanup SOP.

Where to store sensitive outputs?

On the USB or encrypted local storage; avoid synced folders during sensitive work.

How long to keep outputs?

Follow your retention policy; delete working copies after final delivery.

Can I back up to cloud?

Only if policy allows and data is sanitized/encrypted. Otherwise, use local encrypted backups.

What should I wipe after sessions?

Clear browser cache for localhost, delete downloads, and eject the USB cleanly.

Shared machine hygiene?

Use private windows, store outputs on the USB, and remove any shortcuts afterward.

Logs to keep?

Keep minimal notes on approvals and storage locations; avoid storing sensitive logs on shared devices.