Permissions stay. Everything is recorded.

Five promises

1. 1

   Every request for a file is checked against the folder rules, from every app.

   Reading, searching, writing, moving and deleting all go through the same permission check on the hub. A folder you can't open is answered exactly like a folder that doesn't exist.

2. 2

   The company API key stays on the hub. It never reaches a PC.

   A PC talks to the hub with its own token. The hub adds the company key when it calls Anthropic, and it does not pass the PC's token on.

3. 3

   Each PC and each app connection has its own token, stored hashed and revocable at any time.

   Only a SHA-256 hash is stored, so the database holds nothing that works as a token. Tokens for Claude app connections last one hour and are renewed with refresh tokens that rotate.

4. 4

   Uploaded documents are opened in a sandbox.

   PDF, Office and HWP files are read by helper programs with no network access that can only write to an empty work folder: the macOS sandbox on a Mac mini, and bubblewrap on a Linux server where it is installed.

5. 5

   Logs never contain tokens, keys, passwords or file contents.

   The record of file actions says who did what to which path, not what was inside the file.

What we don't promise

These are the places where the promises stop.

• What Claude reads to answer a question goes to Anthropic under your Claude plan's terms.
• People with administrator access to the server can read the files; on a hub we host, that includes Trina's operators.
• On an office network without https, traffic between PCs and the hub is plain http.
• In subscription mode, costs on the usage screen are estimates from Claude Code's own reports.

Where it runs

• Hosted by Trina

  Your hub at your-company.trina.app, on Trina's servers.

• Your server

  A Linux server of yours. You are the administrator.

• Office Mac mini

  A Mac mini in your office. You are the administrator.

Reporting a vulnerability

A bug that lets someone see, change or spend more than they should is a security bug. Email us with the subject "Security: Trina AX" and do not open a public issue. We reply within 72 hours, and fixes go out to everyone at the same time.

contact@trina.app Read SECURITY.md on GitHub