A clear boundary around your workspace.

SafetyOps Copilot is an open-source individual workflow tool. Use de-identified observations. Keep medical details, personal identifiers and confidential operational records in your official system.

What is stored.

Your observation text, location, generated assessment, corrective actions, owners, due dates and action history are stored in the application's database. A randomly generated browser credential grants access to one workspace. The database stores its SHA-256 digest, not the raw credential.

The cookie is your key.

The workspace cookie is HttpOnly, SameSite=Strict and Secure on HTTPS, with a one-year browser lifetime. It is necessary for workspace access and is not used for advertising. Anyone with access to this browser profile can use its workspace. Clearing cookies or using another device loses access; email recovery and cross-device synchronization are not available.

Retention and deletion.

Records remain until you delete the workspace from its settings. Cookie expiry does not automatically delete server records. Automatic retention cleanup and account recovery are not implemented. Deletion removes the active workspace records, including its action history; database-provider backups may retain historical copies under the provider's backup policy.

Processing and infrastructure.

The website and API run on Google Cloud Run. Workspace records use the configured SQL database. Workspace assessment runs in the Python service and does not call an external LLM. The legacy Copilot endpoint may use an optional separately configured LLM provider. Basic request and operational error logs are produced by the hosting service; observation bodies are not intentionally logged by the workspace endpoints.

Samples, exports and agents.

Synthetic demo records are separate from your workspace. Exports download to your device. The optional local MCP server works with text or archive data explicitly supplied to it; it cannot access browser workspaces. Your agent host may process supplied data according to its own settings.

Project support.

For defects, open a GitHub issue without private data or credentials. This project has no contractual uptime or disaster-recovery guarantee.