# Privacy and data-stays-local Jaisiu keeps your data on your box by default. The installer runs on your machine, the inference engine runs on your machine, your GitHub repos are read by a local adapter, your YouTrack tickets are read by a local adapter, and the agent's working memory (recent runs, past decisions) lives in `~/.jaisiu/` on your machine. The only thing that leaves your host is what you explicitly send to the Pryzm broker — and you can see exactly what was sent, in the broker log, line by line. There is no analytics, no telemetry, and no model-training-on-your-data pipeline. Jaisiu is built so that the operator's data is the operator's data. ## What the Pryzm broker can see When a task routes to the broker, the broker sees: - The task description and any context the agent attached to it. - Tool output that the agent chose to send (code diffs, ticket contents, file excerpts). - The model's response, returned to the agent and discarded by the broker after 30 days. The broker does not see the rest of your machine, your other repos, your other tickets, your other browser tabs, or anything that isn't explicitly part of the routed task. You can audit every call in the broker log. ## Data residency The Pryzm broker is hosted in the EU. Customer data, prompts, and outputs stay in the EU. The Pyrzmat SA entity behind Pryzm is registered in Austria. If you are subject to GDPR, the relevant processing agreement and DPA addendum are at . ## Logging Jaisiu's gateway logs every API call to `~/.jaisiu/logs/` on your machine. The Pryzm broker logs every call it serves for 30 days, then deletes. No third-party analytics on either side. The Pryzm billing system records your email, license tier, and Stripe customer ID — that's it, and it's only accessible to Pryzm operators with a recorded reason. ## Self-hosting the broker If your threat model is "no data leaves this machine under any circumstance", Foundry is the right tier. Foundry installs a Jaisiu broker on your own hardware, fully air-gappable. Contact for a quote. The full GDPR notice, including the lawful basis for processing, sub-processors, and your data-subject rights, is at .