A protected connection is not private-file isolation

Separate network protection from file access, credential storage and outgoing content when evaluating CCIso and VPN tools.

A VPN primarily handles device or application network connections. CCIso aims to protect local privacy and keep Claude within boundaries you control. Start by deciding whether you need to control connections, files or the contents of outgoing data.

CCIso is not a VPN and does not provide an exit service. The macOS version is available; Windows and Linux are still planned.

Compare the scope you need

Your concern VPN tools Current CCIso direction
Network coverage Whole-device or per-app routing, depending on the client Claude processes included in its rules
Behavior after disconnection Depends on blocking options and configuration System rules restrict controlled connections; if the channel goes down, they are blocked instead of connecting directly
Access to personal files A network tunnel does not itself set file permissions Specific credential rules exist; full private-folder isolation does not
Private information in uploads A network tunnel alone does not establish content checks No outbound content inspection
Visibility Varies by product Isolation status in the app, with a Health check and findings

VPN clients differ in routing, DNS and disconnection protection. Evaluate the actual implementation. Network protection alone does not establish local file isolation.

When another tool is unnecessary

If your existing network tool meets your requirements, you may have no reason to add CCIso. If your organization already provides validated endpoint isolation, data controls and network policies, first understand their scope.

CCIso is intended for people who want to see and act on Claude privacy boundaries. It does not yet meet the complete requirement of allowing only files you explicitly select. Read the current scope before choosing it.

Running both

Two network tools may affect the same connection. CCIso has not published complete coexistence validation. When running both, check the actual route, process scope and behavior after disconnection.

Continue

Concept reference: Anthropic’s sandboxing documentation describes filesystem and network isolation separately. Reviewed on November 1, 2026.

Protect local privacy. Keep Claude within your control.

macOS available · Free · Windows / Linux planned