Built to be trusted.
Every version of Arix follows the same rules. Here's how each one keeps them, including what Windows doesn't do yet.
Yours aloneWhere Arix lives
Arix for Mac · On the Mac in your office. No server at all.
Arix for Windows · On the PC itself, or on your office computer (a Mac or a PC) when the PC joins it. No server of ours.
Arix One · On a private server only you use, with no other customers on it.
Closed unless openedWho may do what
Arix for Mac · Every request is checked against the person's role. Anything not allowed is refused, and the refusal is logged.
Arix for Windows · The same check as on the Mac: every request against the person's role, refusals logged.
Arix One · Everything is denied unless an admin opened it. Unknown actions are refused.
Permissions you setHow much power
Arix for Mac · Per person: what they may run, text, change in files or do on GitHub.
Arix for Windows · Per person, as on the Mac: what each person may do.
Arix One · Per role: five levels from Chat only to Full access, across about 28 kinds of action.
Guardrails on actionsBefore it acts in the world
Arix for Mac · Texts, programs and GitHub changes wait on a card for your yes.
Arix for Windows · Browsing that would buy, send or sign in waits on a card for your yes.
Arix One · Protected files ask first. Email, texts and calls have limits and quiet hours.
Code in a locked boxWhen Arix writes code
Arix for Mac · Tools Arix builds run boxed: their own folder, no internet, no keys. An admin approves first.
Arix for Windows · Not yet. Windows has no locked box for Arix, so Arix refuses to run code, commands or tools it builds rather than run them unprotected.
Arix One · At the Standard and Read only levels, code runs in a container with a read-only system, no secrets and no internet.
Keys stay locked awayPasswords and API keys
Arix for Mac · In the Mac's Keychain. Never shown to members or to Arix itself.
Arix for Windows · In Windows' Credential Manager. Never shown to members or to Arix itself.
Arix One · In your Mac's Keychain, fetched by your server only when needed.
Checks its own claims“I sent it”
Arix for Mac · Every claim of an action is checked against what actually ran.
Arix for Windows · The same check as on the Mac.
Arix One · The same check on every reply.
Private stays privateNotes you mark private
Arix for Mac · Kept from web search and cloud models, in code.
Arix for Windows · Kept from web search and cloud models, in code. Arix's files are locked to your Windows account.
Arix One · Kept from cloud models, in code.
On the recordActivity log
Arix for Mac · Changes to people and passwords, refusals, and the tools and GitHub actions Arix runs.
Arix for Windows · The same activity log as on the Mac.
Arix One · Sign-ins, failed sign-ins, changes, refusals and admin access. Kept a year, with no message contents.
BackupsIf something breaks
Arix for Mac · One encrypted backup every night, to a place you choose.
Arix for Windows · One encrypted backup every night, to a place you choose.
Arix One · Nightly backups to your Dropbox.
Found a security problem? Tell us.
Write to security@arixone.com. We read every report.
Questions about security?
We'll walk you through how Arix keeps your business safe.