Security and privacy

ALL is designed with security and privacy at every layer: apps are isolated from each other, application data is encrypted on disk, and hosts never see the data of the services their device runs.

Data ALL collects to run the network

To operate the network, devices send operational data to the Control Tower:

This is data about the device and its workloads, not the content of the services it runs. For full details on what is collected, why, and who can access it, see the Privacy Policy.

App sandboxing

Each app runs in its own sandbox. It is contained to exactly the resources it has been granted, cannot read the host's files, and cannot reach other apps on the same device.

This matters because one device runs several services at once: one app must never be able to affect the privacy or operation of another.

Permissions

Apps follow a permission model similar to mobile operating systems: they only get access to the interfaces and resources they need, including USB and device interfaces.

Encrypted at rest

All application data is encrypted on disk. Physical access to the hardware does not mean access to the data, even if the disk is removed from the device.

Operator isolation

Node hosts see device health and earnings. They do not see application data, user information or service content. The host provides hardware and uptime; the data stays with the app and its users.

Verified developers

ALL vets every company and developer before they can access the network, so host resources go only to legitimate, ethical use cases.

Host control

Nothing runs on a device without permission, and any app can be stopped in one tap. See Controlling your device.

Managed updates

Nodes are kept updated and secured by the Control Tower from the moment they leave the factory.