Because we're offline by design. Safe Mode shows exactly what each agent can do — and refuses "allow all" patterns. Always.
One employee. One AI assistant. One "allow all" permission dialog. Cloud AI platforms routinely request blanket file access, blanket network access, and blanket API permissions — all bundled into a single checkbox. The employee clicked it.
"The AI said it needed full access to work properly. So I clicked Allow." — Every breach, every time.YourIQ.AI runs offline on your machine. Every agent declares its exact permissions before running. Safe Mode intercepts any request for blanket access and forces a line-by-line review. Network calls are blocked at the OS firewall level. No phone home. No "allow all."
Offline by default. Transparent by design. Audited every run.Built into every YourIQ.AI plan. No upsell. No setting to "turn it on." Safe Mode is the default.
Every agent lists its exact permission set before a single line executes: read files, write files, network access, database access. No hidden permissions. No surprises after the fact.
Active by defaultIf an agent requests blanket access to any resource class — all files, all network, all database tables — Safe Mode automatically blocks the request and shows you exactly what was asked for. No exceptions.
Auto-blocks blanket requestsEvery destructive action — delete, overwrite, send email, POST to API — surfaces a confirmation card. You see the file path, the action, and the agent name. Approve or deny. No batch "do it all."
Confirm before executionSPEC_03 field-level PII detection scans every output before it leaves the agent. Social Security numbers, credit card numbers, and passwords are flagged and shown to you before being written or sent anywhere.
Review before outputEvery agent run writes a tamper-evident, DPAPI-encrypted log entry: timestamp, agent name, files accessed, actions taken, data written. You can review the full audit trail any time — locally, offline.
Local encrypted logIn Safe Mode, all outbound network calls are blocked at the Windows Firewall rule level — not just in software. An agent cannot phone home, exfiltrate data, or reach an external API. The OS enforces it.
OS-level enforcementYou don't unlock Safe Mode at a higher tier. It runs on every machine, every plan, every day — because security shouldn't be a feature you pay extra for.
$20 / month — All features. All agents. Safe Mode on.