The client's data never lands on your laptop

A hospital network hires you to model readmission risk. Their security team's first question: where does the patient data go?

Nowhere. It stays in a container on the bare metal server they rent. You get a permission group on that container's proxy with code: true and sqlite: true; terminal, files, and everything else default to deny. Your hoody-code URL opens VS Code in your browser, on their machine, dataset already there. Your queries run in their hoody-sqlite. Your models train on their cores.

What reaches your laptop is pixels and JSON. No CSV export, no VPN into their network, no encrypted USB stick, no DPA clause about deleting copies at engagement end: there were no copies.

When the project ends, they delete the group. Your access ends at the same instant.

The analyst gets a window into the data, not a copy of it.