Where is my data stored?
Entirely on your device, in local IndexedDB storage — there are no servers, no accounts, no analytics, and no telemetry. The browser version stores data in your browser profile; the desktop app keeps its own separate store. The desktop app's only external calls are the occasional license check and update check, neither of which ever includes your assessment data.
How do I back up my work?
Export Database from the upper-right menu — it saves everything (statuses, notes, evidence, checklist selections) as one versioned JSON file. Because your data lives only on your device, periodic exports are your backup strategy. See Reports & Exports.
Can the browser delete my data?
It can. Browsers treat IndexedDB as evictable storage — clearing site data, some privacy settings, and storage pressure can wipe it. Two defenses: export your database regularly, and for serious or long-running assessments prefer the desktop app, whose storage isn't subject to browser eviction.
My work disappeared / I see an empty app
- Browser: check you're in the same browser and profile (not a private window) where you did the work — each profile has its own storage. If the data is truly gone (cleared site data), restore your latest database export.
- Desktop vs browser: the two keep separate data stores. Work done in one doesn't appear in the other unless you move it with Export / Import Database.
Import fails or reports a version mismatch
Imports accept database files from the same or older app versions. A file exported from a newer version than the app you're importing into won't load — update the app first (releases), then import.
How do updates work?
On macOS and Windows the desktop app can update in place — with your permission, never silently. On Linux, the app notifies you and links to the new .deb/.rpm to install with your package manager. Check manually via License → Check for updates; release notes live on the releases page. Update checks require an active license.
The activation screen won't accept my key
- Check for copy-paste whitespace around the key.
- Activation needs a working internet connection and a roughly correct system clock — a clock that's off by more than a few minutes causes signature verification to fail.
- If the machine can't go online at all, use offline activation instead.
- A trial that has ended shows trial-ended copy — start a subscription to keep going; your data is untouched either way.
Is my SPRS score official?
The app computes your score under the DoD Assessment Methodology as you work; the official number is whatever your organization submits to SPRS. The app's job is making sure that number is right before you submit it.
Getting support
Email support@getcmmc.consulting — include your app version (shown in the License modal) and platform. For assessment questions rather than software questions, book a free consultation with a Lead Certified CMMC Assessor.