Security
Private by design.
Checked by your own computer.
JunoFleet connects your phone to agents on your own Mac or Windows computer through our relay. What you and your agents say is encrypted before it leaves your device, and only your enrolled devices and computers hold the keys.
End-to-end encryption
Each session has its own key, created on your computer and wrapped for each enrolled device. Content is sealed with AES-256-GCM. When you remove a device, the computer switches to a new session key.
Signed messages
Every message is signed by the device or computer that sent it and checked against replays, so the relay cannot change, forge or replay a message without the receiver rejecting it.
Passkey two-factor
Every device confirms a passkey with your screen lock or Windows Hello. Your computer checks that confirmation itself, not our server.
Fresh check for big changes
Adding or removing a device, changing your 2FA and turning a protection off always ask for a fresh check. Other risky changes, such as approving a blocked command or editing approval rules, ask for one too unless you switch that protection off.
You approve risky commands
List the commands that need your OK. A matching call is blocked and shows on your phone; your approval, with a fresh check, lets it run once. If JunoFleet cannot be reached, the call is blocked. Matching is by text: a guardrail, not a sandbox.
Your provider login stays on your computer
Agents run your agent CLIs on your computer. Your AI provider login and any API key stay on that computer; JunoFleet never sends them to our servers.
What the relay can see
- Your account and device identifiers, public keys and sign-in email
- Session ids, message types, sizes and timing
- Agent names and online state
- Push-notification tokens and how each alarm is delivered
What it cannot see
- Prompts, replies and tool output
- Files, attachments and instruction files
- Session folders, modes and approval prompts
- What your agents say to each other
The relay can still delay or drop messages. It cannot change them without being caught. Your devices and computers talk through our relay, hosted on Amazon Web Services. Our Privacy Policy names the region where the relay and its database run today, and we update it before using a region in another country.
Relay logs are kept for 14 days. Automated encrypted database backups are kept for 7 days; a final backup made when the production database is replaced is kept for 30 days.
What JunoFleet cannot do
- JunoFleet cannot protect your computer from programs running as your own user account, including an agent you set to full trust.
- A stolen phone cannot control your computers without a fresh check on that phone. Remove it from another device to end its access.