Company data

Works in its own sandbox

Code the model writes runs in a sandbox, never on our API servers, and each workspace has its own. Outbound network access from the sandbox is open unless the deployment restricts it to a list of hosts. A workspace that makes one of its own PCs the workspace computer runs commands on that PC instead.