Agnos is built so that your documents never have to be trusted to anyone: they stay on your computer. This page covers the rest: where Agnos comes from, the app on your computer, your licence, and how to tell us about a problem.
Your documents
Agnos reads, cleans and exports your documents on your own computer. They are never uploaded, to us or to anyone else, and nothing about them is sent with a licence check. The privacy policy lists exactly what does leave your computer.
What leaves your PC: for IT
One connection, and only for a licence bought online. Everything else Agnos does works with every network adapter turned off, the 14-day trial included.
| Where | When | What is sent |
|---|---|---|
api.polar.sh, HTTPS, port 443 | When someone activates a key, about once every 7 days while Agnos is open, and when someone presses Check now or Deactivate this device | The licence key, our public seller id at Polar (the same for every customer), and a name for the device on activation or the activation id after it. Agnos names itself as Agnos/2. |
- Never sent: documents, their text, file names, word or token counts, settings, logs, usage statistics or a machine fingerprint. There is no telemetry, no crash reporting and no update check.
- Firewall or proxy:
api.polar.shon port 443 is the only address Agnos itself contacts. - If that address is blocked: nothing changes for 60 days. After 60 days with no check getting through, exporting pauses until one does; cleaning and Review keep working.
- No network at all: ask us for an offline key. It is checked on the computer and contacts nothing, ever.
- Not Agnos: the Microsoft Store installs and updates Agnos. Buy and Receipts and keys open Polar in your own web browser; Agnos hands the link to Windows and makes no request itself.
Every field is described in the privacy policy. If you see Agnos make any other outbound connection, that is a bug: please tell us.
Where Agnos comes from
- Agnos comes only from the Microsoft Store. Microsoft checks every version before it is published and signs it, and Windows checks that signature when it installs Agnos.
- There is no other official download. A copy of Agnos offered anywhere else is not from us, so don’t run it.
- It is built from a verified copy of Python and from packages pinned to their exact SHA-256, so a package that changed stops the build instead of shipping.
- The Microsoft Store installs its updates. Agnos itself never updates itself and never downloads anything.
The app on your computer
- Agnos runs a small server that only this computer can reach. It answers requests addressed to this computer alone, refuses requests that come from other websites, and gives each window its own session.
- It installs for your Windows account only, with no administrator rights, and keeps your projects in your own user folder.
- Its logs record what happened, not what your documents say.
Your licence
- A licence bought online is checked with Polar, who sell Agnos for us, over HTTPS. The record Agnos keeps is encrypted by Windows so that only your Windows account on that computer can read it.
- An offline key is signed with Ed25519, so it can’t be forged or edited, and it can be made for one computer only.
- Guessing keys gets nowhere: after five wrong keys in 10 minutes, Agnos asks you to wait.
Reporting a security problem
If you think you’ve found a security problem in Agnos or on this website, email hello@agnos.cloud with “Security” in the subject. Tell us what you found and how to see it happen. Please give us a reasonable time to fix it before you tell anyone else. We answer every report, and we’ll credit you if you’d like.
The same contact is in security.txt, the standard place security researchers look.