PrivacyFence
Download

Download PrivacyFence for macOS, Windows and Linux

Free and open source, under Apache 2.0. PrivacyFence runs on your own machine. Your connector sign-ins, rules and audit log stay on it, and only what you approve reaches your AI assistant. For one person, the recommended way is now PrivacyFence's Docker image; the installers below set up the deprecated desktop mode.

Version 7.0.2Release notes

Recommended: the Docker image on your computer

For one person, the Docker image runs on your own computer in single-user mode: published only on localhost, and set up with a one-time code from the container's log, then a passkey.

docker run --rm -p 127.0.0.1:8765:8765 \
  -v pf-data:/var/lib/privacyfence-org/.privacyfence \
  ghcr.io/privacyfence/privacyfence-org:latest

The log prints Setup code: XXXX-XXXX. Open http://localhost:8765/login to set up your passkey. Open http://localhost:8765, not http://127.0.0.1:8765: the passkey belongs to localhost. The Docker guide has the details.

Single-user mode is no protection against an AI agent that can run docker on that computer: whoever can run docker can read the setup code from the log or open the data volume. Run it under a separate account with rootless Docker or in a virtual machine, or use an organization server.

Other ways to install, including the suite with Peek and Grist

Desktop installers (deprecated)

Linux

Debian / Ubuntu, 64-bit

Download

privacyfence_7.0.2_amd64.deb · 72.5 MB

SHA-2567f2c9f0df0a283b3bb6568488269d90f535ce9e9094bc53a05c40de62f16d358

macOS

Apple silicon · installer + Claude extension

Download

PrivacyFence-7.0.2.dmg · 108.0 MB

SHA-256c979b874f493cb4c9016821fd242155d406e38b26c3eae99ea023d4071e6a9ee

Windows

64-bit

Download

PrivacyFence-7.0.2-setup.exe · 90.4 MB

SHA-2569ab002d24fc2fd3d78c4d8a5dcd8b4e604466ca1d99373d8fc2718677c94f5fa

Verify what you downloaded

Every installer above lists the SHA-256 its build produced. Compare it against the file you received before running it — if the two differ, do not run the file. 

shasum -a 256 <file>            macOS
sha256sum <file>                Linux
Get-FileHash <file> -Algorithm SHA256   Windows

PrivacyFence 7 deprecates desktop mode, and PrivacyFence 8 removes it. Desktop installs keep working through 7.x, without the built-in apps. Move to the Docker image on your computer or to an organization server: see moving to organization mode, and how to install.

Before you install

System requirements

macOS

macOS 13 or later on an Apple silicon Mac, and an administrator password. The installer refuses an older macOS and Intel Macs.

Windows

Windows 10 or later, or Windows Server 2016 or later, on an x64 PC, with administrator rights. Set up Windows Hello (a PIN, fingerprint or face) before you add your first passkey.

Linux

Ubuntu 24.04 or Debian 13 or newer, on amd64 (glibc 2.38 and systemd 242), with sudo, and zenity or kdialog for the companion's dialogs. Other Linux systems and arm64 can use pipx install privacyfence, which runs as you and is not privilege-separated.

Platform support has every supported version, where PrivacyFence keeps its data, and its logs.

What the installer does

What ends up on your computer

macOS

The DMG holds PrivacyFence.pkg and the Claude Desktop extension, PrivacyFence.mcpb. The package installs /Applications/PrivacyFenceApp.app, creates the _privacyfence service account, runs PrivacyFence under it, and starts the menu-bar icon at each login.

Windows

The installer puts PrivacyFence in %ProgramFiles%\PrivacyFence\, runs it as the PrivacyFence Windows service under its own account, keeps your data in %ProgramData%\PrivacyFence\, and starts the tray icon at each sign-in. Its last page offers the Claude Desktop extension.

Linux

The .deb puts a self-contained PrivacyFence in /opt/privacyfence, runs it as the privacyfence-daemon system service under the privacyfence account, keeps your data in /var/lib/privacyfence, and adds a PrivacyFence entry to your Applications menu.

Every installer runs PrivacyFence under its own service account, so an AI client running as you cannot read or change its policy, passkeys, audit log or connector credentials. Log out (on Windows, sign out) and back in once after installing, so your account can reach it.

After you install

Next steps

  1. Follow the install guide for your platform: macOS, Windows or Linux. Each one covers the first start, troubleshooting and uninstalling.
  2. Connect Gmail, Slack or another service from PrivacyFence's Settings: Connecting a service.
  3. Connect your AI client. AI agents has a page for each tested client, with its setup steps.

Not sure whether it is free, whether your data leaves your computer, or how to check a download? The FAQ answers those, including how to verify a download.