Security and data

Your Field Records Stay Yours

Local capture happens first. Cloud account, media backup, hosted links, team sync, and billing are services around the local record and remain off until those cloud services are turned on.

Current launch status

Records, packets, calculations, and exports are local-first today. Synced rows, cloud media, account sessions, hosted packet links, Stripe billing, Resend email, and cloud AI are used only after the matching cloud services are turned on and you start using them.

Custody model

Local-first

Capture, notes, voice, packets, calculations, and exports work locally before cloud sync.

Scoped providers

Cloudflare hosts the app and API and later stores synced records, media, sessions, and hosted packets when cloud services are enabled. Stripe handles FieldOS billing only after checkout is live. Resend handles transactional mail only after email sign-in is configured. Cloud AI receives only text you approve.

Export before delete

Owners can prepare a full export locally. Account deletion and share-link revocation apply to synced cloud data after a signed-in account exists.