You can't leak what we never receive.
Local-first by architecture, not by policy. Your projects never pass through our servers, because there are none of ours in the path.
The architecture is the proof
Most tools ask you to trust their security. With GanttPulse you can verify it: run the app, watch your network, and see that no project data leaves the machine. Proof you generate yourself beats any certificate we could wave at you.
Verify it yourself: five minutes
- 1
Go offline. Turn Wi-Fi off (or unplug), open GanttPulse and work: planning, scheduling, dependencies and exports all run, and the license validates locally.
- 2
Watch the network. Reconnect and observe the app in Windows Resource Monitor's Network tab (or add a firewall outbound-block rule for it). While you plan, there are no connections to outside hosts, loopback
127.0.0.1traffic is just the app's UI talking to its own local engine on your machine. - 3
Use the AI. Now exactly one external connection appears: to the LLM provider you configured with your own key, identifiable by hostname. Point it at a local model and even that disappears. The only other call the app can make is the optional holiday list (Settings, then Holidays, then Load), which fetches a country's public holidays and sends nothing about your plan.
- 4
See anything else? Email security@ganttpulse.com That's a report we want.
Data stays local
Your projects live in a file on your machine or your own server. We never receive, store, or process them.
Your key, or no key at all
Bring your own key, or point it at Ollama on your machine. We never see your prompts either way.
Runs fully offline
Plan, schedule, and export with no connection. Suitable for air-gapped and restricted environments.
Verifiable builds
Every build re-checks its integrity manifest at boot. Authenticode signing lands at launch.
No telemetry
No analytics, no phone-home, no usage tracking baked into the app. Nothing reports back to us.
Offline license check
Your license validates locally with public-key crypto, no seat server, no activation call to us.
What leaves your machine: the honest list
- Nothing, by default. Planning, scheduling, dependencies and exports are entirely local.
- Only when you use the AI: the context you send goes to the LLM provider you chose, with your key. You decide which provider or run a local model so nothing leaves at all.
- Never to us. No telemetry, no analytics, no copy of your data on any GanttPulse server.
The list above is the whole story, the formal privacy policy publishes before launch.
Questions IT teams ask
Where exactly does my project data live?
In a database file on your own machine (or a server you control). There is no GanttPulse cloud holding a copy.
Is the data encrypted at rest?
Your project file sits on your disk and is protected by your operating system's disk encryption (BitLocker / FileVault). Because nothing is sent to us, there is no second copy to secure elsewhere.
What about the AI? Doesn't that send data somewhere?
Yes, and we are upfront about it. When you use the assistant, the relevant context goes to the provider you configured, with your own key, and nowhere else: there is no GanttPulse relay in that path. Choose Ollama instead and the request goes to localhost on your own machine, no key and no egress at all. One thing worth knowing: the deadline forecast, variance explanations, conflict fixes and levelling advice are computed by the app, not written by a model. It phrases them. They still work with the assistant switched off.
Can we run it in an air-gapped network?
Core planning, scheduling, dependencies and exports work with no internet at all. Only the AI assistant needs a reachable model endpoint (which can be on your own network).
What happens to our data if GanttPulse shuts down?
Nothing. The license validates offline with public-key cryptography, there is no activation server to lose. Your projects are database files on infrastructure you control, and everything exports to open formats (Excel, CSV, MS Project XML, JSON) at any time.
Related: offline Gantt chart software · project management without a subscription
Built carefully, by one person you can email
GanttPulse is built and led by Ronen Aruch, no growth team, no investors who need your data to become the product. Questions land in the builder's inbox. The story →
- 10,000+ automated tests
- Date math verified across 9 timezones
- Ed25519 offline licenses, no activation server
- Full-build integrity manifest, re-checked at boot
Have a security questionnaire or need a deeper review?
security@ganttpulse.comWe publish a machine-readable security.txt (RFC 9116).