NoMacSecurity
NoMac gives an agent a whole Mac with full admin rights. That is safe because of isolation: every machine is its own, short-lived, and unreachable by anyone else.
Every Mac is its own
- Each NoMac Session is a separate macOS virtual machine on Apple silicon, made for that session and deleted when it stops.
- A Mac has no public address. Agents reach it only through NoMac's gateway over HTTPS, and SSH checks the Mac's host key.
- Macs cannot reach one another, and nothing outside the session can reach a Mac.
- Only the account's drive outlives a session. It is encrypted with its own key (AES-GCM) before it leaves the Mac, and that key is held by NoMac, never stored with the data.
Every phone is its own
- An iOS Simulator runs under its own macOS user, on its own volume, behind a firewall, on Macs that run phones only.
- A phone has no shell: the agent uses its tools, never the Mac it runs on.
- The phone and its apps are erased when it stops. The project and its build cache are kept for the account's next phone, and deleted after 90 days without use.
- Live view, control and replay links are signed, expire, and can be revoked.
Secrets and Apple keys
- Secrets are encrypted with a key of the account's own (AES-256-GCM), wrapped by a key that exists only in NoMac's deployment. No API returns a secret, and command output masks them.
- An App Store Connect key stays on NoMac's server. Signing and TestFlight use it there; it never reaches a Mac or a chat.
- Agents are told never to ask for a secret in a chat: a person enters it through a one-time link instead.
What we keep, and what we do not
- Product analytics record events such as a session starting, never command arguments, file names, file contents, output or keystrokes.
- Everything on a Mac outside the drive is deleted at stop. Drives are deleted after 90 days without a Mac, or when the account resets them.
- The privacy policy lists what we hold and how to have it exported or erased.
Who processes data for us
| Vercel | The website, the API and the hosted MCP server; privacy-friendly page analytics |
|---|---|
| Neon | The database: accounts, sessions, credit, encrypted secrets |
| Cloudflare R2 | Encrypted drive data, saved phone states, replays and file links |
| Hetzner | The gateway that connects agents to Macs |
| Mac hosting providers in the UK and the US | The Apple silicon Macs that run sessions and phones |
| Polar | Payments, as merchant of record: NoMac never sees card details |
| Resend | Sign-in codes and account email |
| Telegram | Alerts to NoMac's operators about the service and support requests |
Compliance
NoMac is not SOC 2 certified yet. Enterprise customers can ask for a data processing agreement and answers to their security questionnaire: contact us.
Reporting a vulnerability
Send it through the contact form with the topic Security, or to support@nomac.app. Please give us a chance to fix it before you share it. We answer every report.