Security Architecture

Local First, User Centric

OpenClaw is designed with a "Local First" philosophy. All sensitive data—including API keys, conversation logs, and workspace files—are stored on your machine. OpenClaw never uploads your secrets to a centralized server.

Permission System

Every skill in OpenClaw requires explicit permission before execution. For example, if an agent wants to delete a file, you can configure OpenClaw to pause and ask for your approval (Human-In-The-Loop).

Security Level: You can toggle security levels from lax to paranoid in your configuration.

Network Isolation

OpenClaw supports running in an isolated network environment, communicating only with your trusted LLM providers via encrypted tunnels (e.g., Tailscale).