The most common question we get is the most important one: what happens to my code?
Two answers, and they don't conflict: we keep it safe, and we keep it yours.
Safe: we don't lose your work
When you start an agent, a sandbox boots and your code lives on its local disk while you work. Containers pause when they're idle to save you money, and they can be evicted or restarted. So we continuously snapshot your /workspace — encrypted at rest and in transit — to private object storage, and restore it the instant you come back.
Snapshots happen in the background while you work. You don't request them. You don't wait for them. If the container restarts, your files are back before the shell prompt returns.
what happens to a file you edit
- 01
Write
You create or edit a file in the agent workspace.
- 02
Snapshot
An encrypted snapshot is written to object storage in the background.
- 03
Pause
The container pauses after idle time to save cost.
- 04
Restore
You return; the workspace is restored from the latest snapshot in under a second.
That means a project you started from scratch and haven't pushed to GitHub yet survives an idle pause, a restart, or an eviction. Losing that work used to be possible. It isn't anymore.
256-bit
encryption at rest
TLS 1.3
encryption in transit
60s
deletion on revoke
0
third parties with access
Yours: we don't hold it hostage
Persisting your code is not the same as owning it.
- We never sell, share, or rent your code.
- We never train models on it.
- We never use it to improve our own systems.
- GitHub stays your source of truth — publish a workspace to a repo whenever you're ready.
- When you destroy an agent or delete your account, its workspace and every snapshot are destroyed with it.
You can export your workspace at any time. You can delete it at any time. There is no lock-in, no proprietary format, no "contact sales" to get your own files back.
What the wrong default looks like
Some platforms keep your code indefinitely, train on it, or make deletion a support ticket. We chose the opposite default because most builders' code is their leverage. The job is to keep it safe enough that you never lose a day's work, and private enough that you never think twice about whose hands it's in.
Your source code is the compounding asset of your product. We treat it that way: durable, encrypted, never resold, gone when you say so.
Durable, encrypted, never resold, gone when you say so — that's the bar.
The full picture
If you want the line-by-line detail, the security model and data and retention pages spell out exactly what happens, storage region by storage region, action by action.