PonoLens supports privacy and compliance workflows but does not itself establish compliance. This page describes the current prototype.
Local detection and storage
Sensitive-format detection runs locally. Receipts are redacted before SQLite storage, including commands, paths, tool inputs, and auxiliary strings. Command output is never stored. Saved prompt redaction is on by default; disabling it requires a warning. Detection isn’t perfect: redaction can miss private information. For false-positive review, complete prompt originals may be stored separately encrypted only on the Mac that created them, with the private key protected by macOS Keychain. Revealing an original in the Mac app requires macOS authentication. Originals are excluded from Search, exports, and cloud uploads; deleting a receipt also deletes its encrypted original. There is no separate originals-retention toggle. Disabling saved-prompt redaction stores future prompt text in readable form instead. Protected values and token maps are not sent to an LLM.
Local connection
The collector binds to loopback with an authenticated dashboard and scoped integration tokens. The desktop collector uses port 43817 to avoid conflict with OpenTelemetry’s default 4317. Explicit port overrides remain supported. Do not expose the collector to the internet. Agent-reported executable paths are shown in Finder instead of being launched. Custom regex rules reject ambiguous repetition.
Cloud archive
Solo cloud archiving is optional and defaults to on. When enabled with upload consent and an active subscription, it uploads new redacted receipts over HTTPS, including prompt and command excerpts, reported paths, destinations, and review details. Manage it in website My Account or desktop Settings. Enabling it does not upload existing local history. Solo queries are restricted to the signed-in user’s three registered Macs. While cloud archiving and subscription access are active, the desktop app sends a minimal heartbeat every five minutes. Online means a heartbeat arrived within ten minutes. New receipts include locally redacted working-directory metadata for project reporting. Business access follows organization membership and roles. Cloud evidence has fixed 365-day retention; expired subscriptions pause uploads. Protected values, command output, raw tool payloads, token maps, model responses, encrypted originals, and screenshots are excluded. Database recovery backups can retain deleted cloud records for up to seven additional days; those records are not available in the dashboard.
Accounts and credentials
Cloud requests require authentication and server-side authorization. APIs use a dedicated restricted service account, request limits, bounded summaries, and cursor pagination. Private account, purchase, and support-report pages do not load marketing analytics. Capture pauses when account ownership is unavailable or changes. Supported API credentials use macOS credential facilities. Developer integrations use scoped tokens. Stripe handles subscription payments. A compromised account or Mac remains a risk.
Observation and enforcement
Report is the stable default. Redact and Block are experimental and depend on supported before-action hooks. Codex side-chat is observation-only. MCP coverage includes only calls routed through the PonoLens gateway. Receipts do not prove complete device-wide coverage. Deletion after transmission does not undo disclosure.
Distribution and limitations
The Apple silicon v0.2.12 app is Developer ID signed, Apple notarized, and stapled; its signature and staples were verified. These checks do not certify product security or compliance. PonoLens supports macOS 13 or later. Automatic updates, broad clean-device testing, and independent security assurance remain further work.