Source: https://opnearth.com/docs/security

# Security overview

How OpnEarth handles your files and data, for the people who approve software at work.

## Your files

Opening a local file in the desktop app does not upload it. OpnEarth reads the file from disk and draws it on your computer.
  
- Files from vendors are read by a sealed-off reader with no access to the rest of your computer. Archive paths are checked so no entry lands outside its folder, and the reader is tested against broken and hostile files.
 
- Links inside a file to a web address are fetched only after you allow them for that file and those hosts.
 
- Files you add to the web app are uploaded to private cloud storage.

## What is sent, and when

Some features send data when you use them:
  
- Sharing uploads the parts of the map you chose in the share dialog.
 
- Working together sends your edits: the names you type and the coordinates of shapes you draw. The file itself is not uploaded.
 
- Address search sends the text you searched for to your provider.
 
- Basemaps, online icons and 3D terrain request map tiles and icons from their providers.
 
- Live layers send the area you are looking at to the server you added.
 
- Buildings passed and near-net quotes send map areas to the OpenStreetMap (Overpass) server named in the dialog. Near-net quotes also send address text to your address search provider.

## The edition check-in

The app checks in every few hours to confirm your edition. It sends an install ID, the version, the platform and edition, and your licence key or email once you have signed in. It sends nothing about your files.

Crash reports and file-opening times are off by default. Settings > Privacy turns them on and shows exactly what would be sent.

## AI

OpnEarth has no AI service of its own and never sees your questions. You choose who answers:
  
- On your own computer: Ollama or LM Studio. Nothing leaves your computer.
 
- A provider you choose (Pro): Anthropic or any OpenAI-compatible service, under your own key, or a server on your company network.

The file itself is never sent to a model. The in-app tools send names, values, counts and distances.

The MCP server for AI assistants (Pro) opens files only inside the folders you name, caps each session at 5,000 features, and can keep a log of every question.

## Updates

OpnEarth checks for a new version at startup and once a day. Updates are signed, and one that fails the check is refused. Work offline stops update checks.

Early-access installers are not yet signed with a publisher certificate. See [the first launch](https://opnearth.com/docs/install#first-launch).

## Sign-in

Lite works without an account. Paid plans sign in through your browser, then hand back to the app. A fallback sign-in code works once, for 15 minutes.

## Shared maps

Sharing uploads only the parts of the map you choose. The [Security module](https://opnearth.com/modules#security) adds recipient watermarks on maps, prints and downloads, and a map access history kept for one year.

## Policies and contact
  
- [Privacy policy](https://opnearth.com/privacy)
 
- [Subprocessors](https://opnearth.com/subprocessors)
 
- [Data processing agreement](https://opnearth.com/dpa)
 
- [Licence terms](https://opnearth.com/eula)

Security questions or a vendor questionnaire: [hello@opnearth.com](mailto:hello@opnearth.com).