Security

NoMac gives an agent a whole Mac with full admin rights. That is safe because of isolation: every machine is its own, short-lived, and unreachable by anyone else.

Every Mac is its own

• Each NoMac Session is a separate macOS virtual machine on Apple silicon, made for that session and deleted when it stops.
• A Mac has no public address. Agents reach it only through NoMac's gateway over HTTPS, and SSH checks the Mac's host key.
• Macs cannot reach one another, and nothing outside the session can reach a Mac.
• Only the account's drives outlive a session. Each is encrypted (AES-GCM) before it leaves the Mac, with a key held by NoMac and never stored with the data; a copy of a drive shares its source's key.

Every phone is its own

• An iOS Simulator runs under its own macOS user, on its own volume, behind a firewall, on Macs that run phones only.
• A phone has no shell: the agent uses its tools, never the Mac it runs on.
• The phone and its apps are erased when it stops. The project and its build cache are kept for the account's next phone, and deleted after 90 days without use.
• Live view, control and replay links are signed, expire, and can be revoked.

Secrets and Apple keys

• Secrets are encrypted with a key of the account's own (AES-256-GCM), wrapped by a key that exists only in NoMac's deployment. No API returns a secret, and command output masks them.
• An App Store Connect key stays on NoMac's server. Signing and TestFlight use it there; it never reaches a Mac or a chat.
• Agents are told never to ask for a secret in a chat: a person enters it through a one-time link instead.

What we keep, and what we do not

• Product analytics record events such as a session starting, never command arguments, file names, file contents, output or keystrokes.
• Everything on a Mac outside its drive is deleted at stop. A drive is deleted after 90 days without a Mac (30 for one NoMac made), when the account resets it, or when a new drive past the account's limit replaces it.
• The privacy policy lists what we hold and how to have it exported or erased.

Who processes data for us

| Vercel | The website, the API and the hosted MCP server; privacy-friendly page analytics | | Neon | The database: accounts, sessions, credit, encrypted secrets | | Cloudflare R2 | Encrypted drive data, saved phone states, replays and file links | | Hetzner | The gateway that connects agents to Macs | | Mac hosting providers in the UK and the US | The Apple silicon Macs that run sessions and phones | | Polar | Payments, as merchant of record: NoMac never sees card details | | Resend | Sign-in codes and account email | | Telegram | Alerts to NoMac's operators about the service and support requests |

Compliance

NoMac is not SOC 2 certified yet. Enterprise customers can ask for a data processing agreement and answers to their security questionnaire: contact us.

Reporting a vulnerability

Send it through the contact form with the topic Security, or to support@nomac.app. Please give us a chance to fix it before you share it. We answer every report.