REMOTE ARC

Security and data handling

Understand execution boundaries, stored data, permissions and revocation.

Choose the capability boundary per computer

Read access, supported writes, process inspection, terminal execution, browser interaction and task capabilities are separate controls. Trusted Write Locations and sensitive-path rules narrow supported file operations. When unrestricted terminal execution is enabled, the command still inherits the permissions of the local operating-system user, so it should be enabled only on devices where that authority is acceptable.

Understand local recovery and hosted state

Supported file edits can create Local Undo snapshots on the device, and recovery checks the current file revision before restoring older content. Hosted Remote Arc stores account, device, grant, policy, usage and task metadata needed for routing and recovery. It is not intended to become a backup of your whole filesystem.