Know where the work runs.
Cloud mode runs on a Headmaster-hosted runtime. Work mode runs on your own PC. The table below shows what is stored where.
Your work.
Your boundaries.
Useful autonomy starts with understanding what is connected, where the work runs, and which actions are allowed.
Read the privacy and security guide ↗Choose what gets connected.
Model requests can include your prompt, relevant conversation context, memory and file contents. Connected tools receive the arguments needed for their actions. Check the policies and access scopes of the services you use.
Set permissions for the engine.
Whether an action pauses for your approval depends on the engine and the permission mode. The default mode asks first; Autopilot does not. Headmaster does not guarantee that every external action pauses for review.
Protect each part of the setup.
Use narrowly scoped credentials, protect the runtime account and device, and revoke unused connections. Credential storage and retention differ between local and hosted configurations.
Where your data goes.
| Data | Work mode (your PC) | Cloud mode (hosted runtime) |
|---|---|---|
| Prompts and replies | Handled on your PC, then sent to the model provider you choose (the Headmaster relay, ChatGPT, Claude or your own key). | Handled on your Headmaster Cloud runtime, then sent to the model provider you choose. |
| Files and documents | Stay on your PC unless a task passes their content to a model or a connected tool. | Held on your Cloud runtime. Their content is sent to a model or tool when a task needs it. |
| Memory | One memory per account, shared with Cloud, stored with your Headmaster account. | The same account memory, stored with your Headmaster account. |
| Provider API keys | Stored in the app on your PC. | Stored with your Headmaster account on our servers. You can replace or remove a key, but it is never shown again. |
| Account and usage details | Held by GCAP Labs: email, plan, usage counts. | Held by GCAP Labs: email, plan, usage counts. |
| Connected services (Telegram, Slack, email and others) | Each service receives the data a task sends it and applies its own policy. | Each service receives the data a task sends it and applies its own policy. |
A configuration you understand.
Local operation can still call cloud models and connected services. Uninstalling the app does not automatically remove records held by those providers. Review your setup before adding sensitive data.
We do not claim independent security certification on this page.
Talk to GCAP Labs ↗