Security & data handling
Dokima runs in your workspace and delegates analysis to the AI runner you configure. Here is what stays local, what depends on that runner and what your team controls.
Dokima controls
.dokima/Your runner controls
Runner permissions
Shipped runner profiles use read-only or sandboxed modes where the runner supports them. Dokima snapshots its state, makes it read-only during a run and rejects work if a runner attempts to change canonical state directly.
A customer can override runner configuration for its own environment. Any such override should be reviewed against the customer’s security requirements.
Practical controls
Dokima release binaries are provided for Linux and macOS.
dokima update retrieves the latest private release and refreshes shipped prompts.
State snapshots are created before mutating runs and after successful progress.
Remove the binary, .dokima/ state and generated report when you no longer need them.
Dokima will not publish invented legal or compliance assurances. Reviewed privacy, licensing and vulnerability-contact material will be added before trial binaries are distributed through this site.
See what Dokima finds
Request a full-product trial for your engineering team. No payment card required.