Privacy Policy

Privacy Policy

EPI Labs privacy policy. The CLI is offline-first; no telemetry. Minimal data for hosted services.

LAST UPDATED: AUGUST 2026

The short version

The CLI is offline-first: recording, sealing, and verifying happen on your machine. The CLI collects no telemetry. Your .epi files never leave your machine unless you explicitly share them (epi share) or upload them yourself for a hosted report.

Browser verification

The private check at /verify/ runs entirely in your browser tab. Evidence files are processed locally in JavaScript and are not uploaded — this is enforced architecturally, not by policy.

Hosted services

If you create an account or purchase a sprint, we process the contact information you give us to deliver the service. We do not sell data. Analytics on the public website are aggregate and privacy-respecting (Plausible).

Contact

mohdibrahim@epilabs.org