> ## Documentation Index
> Fetch the complete documentation index at: https://docs.velatir.com/llms.txt
> Use this file to discover all available pages before exploring further.

# FAQ

> Answers to the most common questions about Velatir for Desktop

## Overview

The most common questions we hear about Velatir for Desktop, grouped by topic. If your question is not here, [Troubleshooting](/desktop-app/troubleshooting) covers diagnosis, and your account team can help with anything operational.

## What it is and what it does

<AccordionGroup>
  <Accordion title="Does Velatir for Desktop cover AI in the browser?">
    Yes. Velatir for Desktop covers AI usage in web apps as well as in desktop and CLI apps, from one install and one ingest key. There is no separate product to deploy.
  </Accordion>

  <Accordion title="Does it inspect all my traffic?">
    No. Velatir only inspects traffic from a curated list of supported AI applications. Everything else on the device is passed through untouched.
  </Accordion>

  <Accordion title="Which AI applications are supported?">
    Coverage includes GitHub Copilot (VS Code, JetBrains Rider, IntelliJ IDEA, Visual Studio, Xcode, Neovim, GitHub Copilot CLI), Microsoft Copilot in Word, Excel, PowerPoint, Outlook, and Teams, the standalone Microsoft Copilot desktop app, Claude Code (CLI and VS Code), Claude Desktop, Claude for Word, and ChatGPT for Word. See the [supported applications](/desktop-app/overview#supported-applications) list for the current set. If you need coverage for an application that is not yet supported, request it through your account team.
  </Accordion>
</AccordionGroup>

## Installation and updates

<AccordionGroup>
  <Accordion title="How is it distributed?">
    An MSI for Windows and a PKG for macOS. Linux support is in development. See [Download and install](/desktop-app/download-and-install).
  </Accordion>

  <Accordion title="Can I install it silently for a whole organisation?">
    Yes. Microsoft Intune, Jamf Pro, and any MDM that deploys an MSI or PKG work out of the box. See [Enterprise deployment](/desktop-app/enterprise-deployment).
  </Accordion>

  <Accordion title="How are updates delivered?">
    The agent checks every four hours and updates itself automatically, with no update service to manage. You can apply one immediately with `velatir update --apply`.
  </Accordion>

  <Accordion title="Can I pin a specific version for change management?">
    Yes. Tenant-specific update channels are available for organisations that need to coordinate updates with their own change-management process. Contact support to enable this for your tenant.
  </Accordion>

  <Accordion title="How do I uninstall?">
    Use Add/Remove Programs on Windows (or `msiexec /x`), and `sudo velatir-uninstall` on macOS. Both remove Velatir and everything it installed cleanly. See [Download and install](/desktop-app/download-and-install#updates-and-uninstall).
  </Accordion>
</AccordionGroup>

## Permissions and privacy

<AccordionGroup>
  <Accordion title="What permissions does it request?">
    Administrator rights at install time on both platforms, and a one-time system extension approval on macOS. The full list with rationale is in [Permissions](/desktop-app/permissions).
  </Accordion>

  <Accordion title="Does it have access to my files, screen, microphone, or clipboard?">
    No. Velatir requests none of these. It does not request Full Disk Access on macOS, and it does not capture screenshots or keystrokes. Its only inputs are the connections of supported AI applications.
  </Accordion>

  <Accordion title="What data is sent to Velatir?">
    For each captured interaction, a trace containing the prompt, the response, the model, token counts, and process context. What gets stored after capture is governed by your agent configuration and your data privacy settings. See [Data privacy](/security/data-privacy).
  </Accordion>

  <Accordion title="Does it work offline?">
    Velatir needs to reach `api.velatir.com` to submit traces. If the device is offline it buffers them and sends once connectivity returns; your AI applications keep working as normal in the meantime.
  </Accordion>
</AccordionGroup>

## Networking

<AccordionGroup>
  <Accordion title="Is it compatible with corporate VPNs?">
    Yes, including split-tunnel and full-tunnel VPNs. Velatir adjusts on its own when a VPN connects or disconnects, so no restart is needed. See [VPN compatibility](/desktop-app/vpn-compatibility).
  </Accordion>

  <Accordion title="What happens if something goes wrong?">
    Velatir recovers on its own within seconds, and never leaves the device without internet access.
  </Accordion>
</AccordionGroup>

## Certificates

<AccordionGroup>
  <Accordion title="Can I use my own certificate authority?">
    Yes. Provide a PFX bundle and Velatir uses it instead of its own certificate. This is the recommended path if you already operate an internal CA. See [Bring your own certificate](/desktop-app/bring-your-own-ca).
  </Accordion>

  <Accordion title="My Node.js or Python application rejects the certificate. How do I fix it?">
    Runtimes that keep their own trust store (Node.js, Python `requests`, JVM) need an explicit pointer to the Velatir certificate. See [Troubleshooting](/desktop-app/troubleshooting#certificate-not-trusted-by-a-specific-runtime).
  </Accordion>

  <Accordion title="Does it work with certificate-pinned applications?">
    Pinned applications are detected and passed through unmodified; they cannot be inspected without the application cooperating. If a pinned application matters to your compliance workflow, contact your account team.
  </Accordion>
</AccordionGroup>

## Operations

<AccordionGroup>
  <Accordion title="How do I monitor it across a fleet?">
    Run `velatir status --json` as a Microsoft Intune Remediation, a Jamf Pro extension attribute, or any similar device-state collector. The output includes the agent's status, version, capture state, and last trace timestamp.
  </Accordion>

  <Accordion title="How do I rotate ingest keys?">
    Redeploy the install command with the new key, or run `velatir set-api-key --key vltr_...` on the device. The new key takes effect immediately.
  </Accordion>

  <Accordion title="What does it look like for end users?">
    Nothing visible besides a tray icon. Supported AI applications work exactly as before, and users are never prompted. Behaviour only changes when an agent in **Enforcer** mode blocks or escalates an interaction.
  </Accordion>
</AccordionGroup>

## Next steps

<CardGroup cols={2}>
  <Card title="Download and install" icon="download" href="/desktop-app/download-and-install">
    Set Velatir up on Windows or macOS.
  </Card>

  <Card title="Enterprise deployment" icon="building" href="/desktop-app/enterprise-deployment">
    Roll out across your organisation.
  </Card>

  <Card title="Troubleshooting" icon="life-buoy" href="/desktop-app/troubleshooting">
    Diagnose the issues most commonly seen in production.
  </Card>

  <Card title="How it works" icon="layers" href="/desktop-app/how-it-works">
    How Velatir for Desktop works.
  </Card>
</CardGroup>