Each report is the same JSON the llm-host-guard --json command prints: hostname, operating system, LAN IP, tool version, laptop/desktop, a score, and the list of findings (check name, severity, title, explanation, suggested fix). It never contains prompts, model outputs, file contents, user names, or credentials. Findings may name a process, a port, a file path, or a container name.
Only admins of the team the enrol key belongs to. Row-level security in the database enforces this; the collector uses a server-side key that is never sent to browsers. HomeAuto Solutions staff do not read report contents except to debug a problem you ask us to look at.
Full reports are kept 90 days, then reduced to one score per host per day. Delete a host from its page to remove all its reports. Deleting your team deletes everything.
If you add a Telegram, Slack, or webhook channel, alert text (hostname, score, finding title, fix) is sent to that third party. Remove the channel to stop.
Email magic links via Supabase Auth. We store your email and nothing else about you. No analytics or tracking scripts on this site.
Database and collector run in Singapore (AWS ap-southeast-1). Contact: privacy@homeauto.sg. Applies under Singapore PDPA and, for EU users, GDPR.