---
title: "Security and data | Obi"
description: "What Obi reads, sends and writes, how you sign in and revoke access, where your data is stored, and how to report a vulnerability."
canonical: "https://hireobi.com/security"
human_url: "https://hireobi.com/security"
markdown_url: "https://hireobi.com/security.md"
updated: "2026-11-09"
---

# Security and data

What Obi reads, sends and writes, where it keeps it, and how you end its access.

Checked against the CLI's code: 2026-11-09

## What Obi reads

- Obi reads your website's public pages, and your public competitors' pages once you agree. It asks for that scope once.
- The pages are fetched from your machine, by your agent's browser or the CLI. The fetched files stay on your machine.
- Obi saves only the passages it cites, from public pages, at most 40 pages per save.
- Obi asks for a private extract only when a task needs it, and only with your agreement.
- Your secrets and the rest of your workspace stay on your machine.

## What Obi sends, and where

- The CLI talks to one address, Obi's own server, over HTTPS.
- That address is fixed when the CLI starts. No file or repository you open can point it elsewhere.
- The CLI refuses any link from the server that leads outside that address.
- Obi sends the passages it cites, your buyer questions, its strategies and drafts, and what you ask it to remember.
- When you connect a machine, the CLI sends its name and the program that ran it, so you can tell your machines apart.
- Obi's servers ask the AI engines your buyer questions. An answer your own agent writes never counts as a measurement.

## What Obi writes

- **On your machine:** Your sign-in, the files of its research, and two links that register its Skill with your agents.
- **On Obi's servers:** Your business's sourced facts, buyer questions, the engines' answers, strategies, drafts, and what you ask it to remember.

Obi drafts pages and fixes for you to review. The CLI cannot publish anything: you publish what you accept.

## Sign-in and access

- You connect a machine in your browser. The CLI shows a code; approve only when the page shows the same one.
- Name the email you expect, and the CLI stores nothing unless that account approved.
- Your sign-in lives in your system's credential store: the Keychain on macOS, the Secret Service on Linux.
- Or, when you choose it, in a file only your user can read. The CLI refuses a file or folder other users can open.
- The CLI never prints a token.

- `obi credentials list` shows each connected machine, with its name, CLI version, account email and dates.
- `obi credentials revoke` ends one machine's connection.
- `obi logout` ends this machine's connection on Obi's servers, then deletes the sign-in from it.

## Where your data is stored

Obi's database and servers run in the United States, in US East. Wherever you work from, your data is stored there.

## Deletion

- `obi memory remove` deletes one thing you asked Obi to remember.
- `obi logout` deletes the sign-in from your machine, whatever Obi's servers answer.
- To have your account and its data deleted, write to support@hireobi.com.

## Reporting a vulnerability

Found a security issue in Obi? Follow the vulnerability policy: https://github.com/hireobi/.github/blob/main/SECURITY.md

## Next actions

- Report a vulnerability: https://github.com/hireobi/.github/blob/main/SECURITY.md
- Read every question on data, answered: https://hireobi.com/faq.md
- Open the product: https://agent.heysurface.com