Security is part of the job

Your computer.Permission required.

Remote access reaches real files, signed-in apps and powerful tools. Steerable separates who you are, which device you approved and whether this session is allowed to control your Mac.

Access is a privilege. Keep it that way.

Your computer is powerful.Access should be earned.

Your files. Your signed-in apps. Your agents. We protect the connection with specific checks you can understand and control.

/01

Your login alone isn’t enough.

A new controller needs approval on the Mac. Every new session also needs the machine password and a fresh authenticator or recovery code.

/02

The relay carries it. It can’t decrypt it.

Screen and control traffic is encrypted between paired devices. A TURN relay forwards that encrypted traffic; it is not the endpoint that decrypts the session.

/03

Your permission has an off switch.

Stop Steerable Copilot, end a session or revoke a controller. An approved device gets only its granted access—not permission to every machine.

Clear about what the AI can see.

Steerable Copilot can send task-related screen images and app text to your chosen provider. That is separate from remote-session encryption. Your other agents follow their own permissions and provider policies.

Three data paths. No blurred lines.

Know what travels where.

Your remote session

Screen frames and control input travel through encrypted WebRTC between your paired devices. Cloud may use a relay. Local keeps that traffic on the permitted LAN.

Your phone ↔ your Mac

The Steerable service

Account identity, authorization and connection metadata support setup and session access. Local mode still requires platform sign-in and fresh authorization.

Account + connection services

Your chosen AI provider

Copilot can send relevant screen images and app text for a requested task. The provider’s terms and your configuration govern processing and retention.

Your Mac ↔ your AI provider

DEVICE TRUST

Approved once. Still checked each session.

A new controller is approved on the target Mac with a matching pairing code. Trusted controllers reconnect under the policy you chose. New sessions still require the machine password and a fresh authenticator code, or a one-use recovery code.

Knowing a Device ID alone never grants control.
Trust on one machine does not authorize every other machine.
Expired, revoked or broader permissions require fresh authorization.

PROVIDER CREDENTIALS

Manage your AI connections on the Mac.

Saved API keys for Steerable Copilot are stored in macOS Keychain. Provider connection management stays on the desktop; remote phone controls do not return those saved keys. Provider accounts can also have local runtime records.

Clearing a visible chat is not the same as deleting every provider record.
Review the data policies of the provider you choose.

HUMAN CONTROL

The next move is still yours.

Stop Steerable Copilot and continue manually. It also yields when you start using its target app. End a remote session or revoke a controller when access is no longer needed. Stopping a task does not undo actions already completed.

Copilot runs one task at a time; leaving or locking the phone remote stops its task.
Steerable’s Stop control applies to its own Copilot, not to independently running agent processes.

YOUR EXISTING AGENTS

Secure access isn’t an agent sandbox.

If you use Codex, Claude Code, OpenClaw, Hermes or another agent through the remote desktop, that agent still follows its own permissions, tools and provider policies. Steerable protects the remote-access path; it does not automatically constrain every action a third-party agent can take.

Keep each agent’s own access and approval settings under your control.
Existing-agent workflows are not native integrations, partnerships or a claim of verified compatibility.

Ask us the hard questions.

Talk through your setup or report a security concern.
These are design explanations, not a claim of independent certification.

Talk about security

Reach your computer.Delegate the work.Keep the final say.

See it work