Enterprise

Robota is used by engineering teams that need a controllable, self-hostable AI coding assistant. This page covers security practices, deployment options, and how to get in touch.

Contact Us

To discuss team licensing, on-premises deployment, priority support, or custom integrations, open a GitHub Discussion or email us directly.

We respond to all enterprise inquiries within 30 business days.

Security Policy

Data Handling

Robota operates as a local CLI or self-hosted server. No conversation data is stored or transmitted to Robota servers — the SDK calls the AI provider of your choice directly from your machine or infrastructure.

Data typeWhere it goes
Prompts and responsesSent only to the AI provider you configure
API keysStored in your local environment variables or secrets manager
Session historyWritten to your local filesystem (~/.robota/sessions/)
Tool outputs (files, shell)Stay on your machine

On-Premises Deployment

Robota supports fully air-gapped deployments using local LLMs:

  • Ollama — run models locally with zero external network calls
  • LM Studio — OpenAI-compatible local server
  • Any OpenAI-compatible endpoint — point baseURL to your internal gateway

import { OpenAIProvider } from '@robota-sdk/openai';

const provider = new OpenAIProvider({

apiKey: 'local',

baseURL: 'http://your-internal-gateway/v1',

model: 'your-model-name',

});

MIT License

Full source code available for audit at github.com/woojubb/robota

No telemetry

No analytics, no phone-home in the SDK or CLI

Append-only session logs

You control retention and deletion of all local session files

SOC 2 / ISO 27001 compatible

When combined with a compliant AI provider

FAQ

Does Robota store my code in the cloud?

No. All file reads and writes happen on your local machine. The only data that leaves your machine is the prompt you send to your configured AI provider.

Can we use Robota behind a corporate proxy?

Yes. Set the standard HTTPS_PROXY environment variable and the SDK's HTTP client will route through it.

Can Robota be installed in a restricted network with no internet access?

Yes — use a local LLM (Ollama, LM Studio) and install npm packages from an internal registry mirror.

Is there a commercial license option?

Robota is MIT-licensed and free to use commercially without restriction. Enterprise support contracts (SLA, dedicated channels, custom integrations) are available — contact us for details.

Vulnerability Disclosure

To report a security vulnerability, email security@robota.io with a description and reproduction steps. We follow responsible disclosure and aim to issue a patch within 14 days of confirmation.