GitHub
Private by default. Open to check.
TaskForce runs on your computer and keeps your work there. Here is what it stores, what can leave and when, and how agents are kept in check. The code is open, so you can verify every line.
- Account
- A free TaskForce account, to sign in
- Your data
- In one folder on your computer
- Your keys
- In your system's keychain
- Telemetry
- None
- AI
- A local model, or the API key you choose
- Source code
- Open, under AGPL-3.0
One folder, on your computer.
Your projects, Brain OS pages, attachments and settings live in the app's data folder. Nothing is stored anywhere else.
- Windows
- %APPDATA%\TaskForce
- macOS
- ~/Library/Application Support/TaskForce
- Linux
- ~/.local/share/TaskForce
- API keys and GitHub tokens go to your system's keychain, never in plain text
- Your database is copied before every update
- Turn on disk encryption to protect the rest: the app doesn't encrypt its database
Nothing leaves without your say.
Our own server only holds your account, and the app sends no usage data. These are the only connections TaskForce makes, and apart from signing in, each one is something you set up.
- Your TaskForce account
- When you sign in. Our account server keeps your name and email address, never your projects. If you accept, it sends your web app projects to your computer.
- Your AI provider
- Only if you add an API key. Your question and the context it needs go to that provider. With a local model, nothing leaves.
- Claude Code
- It talks to Anthropic with your own account, exactly as when you use it yourself.
- GitHub
- Only if you connect it: the repositories, issues and pull requests you work with, and the tasks you give to Copilot.
- MCP servers and Plane
- Only the ones you connect, when the assistant or a sync uses them.
- Webhooks
- Only to the addresses you add, while the app is open.
- Updates
- The app checks the project's GitHub releases for a new version.
Agents work inside your limits.
Coding agents are powerful, so TaskForce sets the limits of every run itself. They hold whatever the agent is asked to do.
- Each run works in a separate copy of your repository, on its own branch
- Commands outside reading, editing and committing wait for your Allow or Deny
- Pushing is always refused: TaskForce opens the pull request itself
- A cloned repository can't change how the agent runs: its own agent settings are ignored
- Issue text is passed as task data, never as instructions
- In TaskForce, the agent can read your workspace and write issues of its project, never delete
Don't take our word for it. Read the code.
Every line is public
The whole app is published under the AGPL-3.0 license: the interface, the service behind it, and the way agents are started.
Source codeBuild it yourself
Prefer not to run a file you downloaded? The source code is public, so you can build the app yourself.
All downloadsReport a problem
Found a security issue? Tell us privately: with “Report a vulnerability” in the repository's Security tab, or by email with “Security” in the subject. We answer within a few days.
contact@taskforce-project.fr
Why do I need an account?
Your account lets you bring your web app projects to your computer, and lets us tell you about updates and changes. It holds your name and email address, never your projects. You sign in once: after that, the app also works offline.
Can I use TaskForce for confidential projects?
Yes. With a local model, nothing about your projects leaves your computer. If you add an API key or connect an agent, that provider receives what it needs to answer, so check that it is allowed by your company first.
Is my data encrypted?
Your API keys and tokens are kept in your system's keychain, never in plain text. The database itself is not encrypted by the app: turn on your system's disk encryption (FileVault, BitLocker or LUKS) to protect it.
Does TaskForce see my code?
No. Our server only knows your account. Your code stays in your repository: the agents you start read it, and send what they need to their own provider, Anthropic for Claude Code and GitHub for Copilot.
Can other apps on my computer talk to TaskForce?
The app's internal service only accepts connections from your own computer, on a port picked at each launch, and only from requests that carry a key the app creates at every start.
What happens to my data before an update?
The app copies your database before applying an update, so a failed update never costs you your work.
Your work, on your computer.
Install TaskForce, create your free account, and start with your first project.
macOS · Windows · Linux · all downloads