# Trust

> Where your app runs, what protects it, where your data lives, and what keeps the agents inside their limits.

You trust GoLocomotive with your business data and with code that AI agents write. This section says plainly what protects both, and what is not done yet.

## In short

- **Your app runs alone.** One process and one database file per app, on servers we run. No other customer's code or data is in it.
- **Nothing reaches the app directly from the internet.** The app listens only inside its server. Visitors reach it over HTTPS through one front door that carries only its own address.
- **Your rules are the last word.** Who can read or change each record is decided by the app's server rules, for every screen, every export and every AI.
- **Agents work in a closed space.** They change only your app's code, reach only the services they need, and stop at a spending limit.
- **Nothing ships without you.** Agents change the working copy. Only you release and deploy.
- **Your app is yours.** Its code and data are yours from day one. You get the full repository on request, and you leave with it whenever you want.

## Pages in this section

- [Security](https://golocomotive.fr/docs/trust/security.md): the layers between the internet and your data.
- [Your data](https://golocomotive.fr/docs/trust/data-protection.md): where it lives, who can see it, backups, and how your code and data leave with you.
- [How agents are contained](https://golocomotive.fr/docs/trust/agents.md): what an agent can and cannot reach while it changes your app.