Security and Privacy
Keys that access model providers never reach the user's device. The Web, Mobile, and Desktop clients make model requests through the MORATUS server; the keys are used only there.
| Secret | Where it's kept | How it's protected |
|---|---|---|
| Model provider keys | On the server only | Never included in the browser, the mobile app, or the Desktop package |
| Connector access and refresh keys | On the server | Encrypted with AES-256-GCM; never sent to the client, invalidated when the connection is removed |
| Mobile session | On the device | Stored in the device's secure key store (iOS Keychain) |
| Card and payment details | With Paddle | Not stored by MORATUS |
- The Web client bundle is scanned for secret keys on every build.
- Even if a client package can be inspected, it contains no provider keys.