Security

Overview

Nue is an early-access, privacy-first, local-first personal agent OS. Security is an important part of the product direction, but Nue is still under development and should not be treated as hardened enterprise software.

Security approach

• Prefer local processing where possible.
• Minimize unnecessary data collection.
• Limit access to production systems.
• Use reputable service providers.
• Review sensitive product flows as they are developed.
• Make consequential actions visible for user approval.

Early-access limitations

Because Nue is in early access, some security controls, reviews, documentation, or processes may still be evolving. Desktop installers have not yet been released, and accounts, cloud, and team features are coming soon.

Users should avoid using early-access versions for highly sensitive, regulated, critical, or production-dependent workflows unless they understand the risks.

Local-first design

Nue is designed to keep user data local where practical. Future features may allow data to sync, back up, or move through cloud systems, model providers, or integrations when users enable those capabilities. When data leaves the device, Nue should make that clear where practical.

AI and tool safety

Nue may connect to model providers and tools in the future. AI systems can make mistakes, misunderstand instructions, or produce unsafe recommendations. Users should review AI outputs and approve consequential actions before they occur, especially actions involving files, accounts, communications, purchases, or external systems.

Service providers and certification claims

Nue may rely on third-party service providers for hosting, databases, email, infrastructure, analytics, support, and security. These providers may process limited data as needed to provide their services.

Nue does not currently claim SOC 2, ISO 27001, HIPAA, GDPR certification, or similar compliance certifications on this page. Any future certification, audit, or compliance claim should be reviewed before publication.

User responsibilities

• Use strong device and account security.
• Review permissions before connecting tools.
• Avoid unnecessary sensitive data in prompts or integrations.
• Keep installed software up to date.
• Verify AI-generated outputs before acting on them.

Vulnerability reporting and incident response

If you believe you have found a security vulnerability, please report it to hello@nue.orthg.nl. Until a dedicated security channel exists, include a brief description, safe reproduction steps, affected URLs or versions, potential impact, and contact information for follow-up.

Please avoid accessing, modifying, deleting, or sharing data that does not belong to you. If we identify a security issue affecting users, we will take reasonable steps to investigate, reduce risk, and notify affected users where appropriate.