Privacy starts in the architecture.
Four principles, applied to every product.
Four principles.
- LOCAL-FIRST
Privacy by architecture
Software runs on your device where possible; hosted features declare what runs there.
- DATA
Data sovereignty
We keep account details to run your account and contact details to handle access requests. Your routes and local agent memory are not part of those records.
- OPT-IN
Your choice
You control account sign-in, profile photos, and location permissions. We disclose what information is sent and what remains on your device.
- HONEST
Honest availability
Coverage, availability, and limits are stated per product. Unshipped work is marked unshipped.
The same principles, per product.
- MomentumLocal-firstYour work stays on your computer. Signing in does not upload it.
- Momentum CloudComing soonThe same memory, self-hosted in your company's own cloud.
- PathwaysOn-device pathfinding. No trip data retained.
- Vertral Spatial EngineComing soonThe graph behind Pathways. Hosted API coming soon.
- Tactico AccountSign-in and a private profile photo. No conversation or project sync.
Where the limits are.
Accounts and local work
We store account details, uploaded photos, and waitlist requests to provide those services. Signing in does not upload your Momentum work. Hosting providers still process ordinary network requests.
Yours to enable
You choose account sign-in, photo uploads, and GPS. Harnesses contact their own providers; Momentum Cloud runs in your company’s cloud.
Enterprise
Coming soon. Organisation audit logs under contract are separate from product telemetry.