The Vault is a per-project encrypted enclave for confidential sources, burner contacts, and sensitive notes, protected by your Mac's Secure Enclave and Touch ID.
7 items encrypted
Secure Enclave key on this Mac. Touch ID to unlock. The list below is a count, not the documents.
- Sources
- Contacts
- Notes that must not travel
Secure Enclave & Touch ID
Vault encryption keys are generated and stored in your Mac's hardware Secure Enclave. Access requires biometric Touch ID verification or your Mac account password.
Structural Agent Isolation
Roono enforces structural, non-filtering privacy: Vault data is physically absent from agent workspaces, MCP tool endpoints, Spotlight indexing, and ordinary exports. An AI agent cannot inspect or quote an encrypted source.
Managing Sensitive Sources
Put confidential contacts, background documents, and notes that must not travel in the Vault. Export and the plaintext Markdown mirror skip Vault items unless you explicitly decrypt a single item for that export.
Face ID unlocks the Vault on iPhone and iPad. Agent execution stays on the Mac, and even there the Vault is not mounted into the agent workspace.