Agnos is built so that your documents never have to be trusted to anyone: they stay on your computer. This page covers the rest: the download, the app on your computer, your licence, and how to tell us about a problem.
Your documents
Agnos reads, cleans and exports your documents on your own computer. They are never uploaded, to us or to anyone else, and nothing about them is sent with a licence check. The privacy policy lists exactly what does leave your computer.
The download
- The installer is served over HTTPS from our own domain.
- The download page publishes its SHA-256 fingerprint, and you can check your copy against it on the page, without uploading it, or with one PowerShell command.
- It is built from a verified copy of Python and from packages pinned to their exact SHA-256, so a package that changed stops the build instead of shipping.
- It isn’t code-signed yet, which is why Windows shows a warning the first time you run it. Until it is, the SHA-256 check is how to be sure you have our file.
- Agnos never updates itself and never downloads anything by itself. A new version is a new installer from the download page.
The app on your computer
- Agnos runs a small server that only this computer can reach. It answers requests addressed to this computer alone, refuses requests that come from other websites, and gives each window its own session.
- It installs for your Windows account only, with no administrator rights, and keeps your projects in your own user folder.
- Its logs record what happened, not what your documents say.
Your licence
- A licence bought online is checked with Polar, who sell Agnos for us, over HTTPS. The record Agnos keeps is encrypted by Windows so that only your Windows account on that computer can read it.
- An offline key is signed with Ed25519, so it can’t be forged or edited, and it can be made for one computer only.
- Guessing keys gets nowhere: after five wrong keys in 10 minutes, Agnos asks you to wait.
Reporting a security problem
If you think you’ve found a security problem in Agnos or on this website, email hello@gidion.io with “Security” in the subject. Tell us what you found and how to see it happen. Please give us a reasonable time to fix it before you tell anyone else. We answer every report, and we’ll credit you if you’d like.
The same contact is in security.txt, the standard place security researchers look.