> ## Documentation Index > Fetch the complete documentation index at: https://docs.audimate.ai/llms.txt > Use this file to discover all available pages before exploring further. # Sandbox > How your computer's own sandbox limits the commands and programs Arro runs, and which versions of Windows have it. Learn how your computer's own sandbox limits the files and sites reached by the commands and programs Arro runs. The desktop app is available for Windows and for Macs with Apple silicon. The sandbox is part of the [desktop app](/concepts/desktop-app) on every plan, including Free. There is nothing to turn on. On Windows it needs a recent version of Windows 11, listed under [On Windows](#on-windows). ## How it fits with your settings Before Arro runs a command, it checks the command against your [Allowed folders](/concepts/desktop-app#allowed-folders), [Allowed sites](/concepts/desktop-app#allowed-sites) and [approval mode](/concepts/desktop-app#approval-modes). The sandbox is a second layer under those checks. Your operating system starts the command with only the access those checks granted. ## What runs in the sandbox | What Arro runs | In the sandbox | | - | - | | Shell commands in background tasks | Yes | | Audio and video conversions | Yes | | Programs Arro writes, such as reading a spreadsheet | Yes, with tighter limits | | Arro reading, writing and editing a file itself | No, checked against your settings | | A [plugin](/concepts/plugins)'s own programs | No, admitted when you install it | | The agent browser and [computer use](/concepts/computer-use) | No, they act on your real screen | A command the sandbox cannot be set up for does not run. The task reports the error instead of running the command without it. ## What a command can reach | Access | Shell commands | Programs Arro writes | | - | - | - | | Read files | Anywhere but protected locations | Arro's home, allowed folders, the task's folders | | Change files | Folders the task may change | Folders the task may change | | Reach websites | Approved sites | None | Credential stores stay closed in both. Secret files like `.env` stay closed in both on a Mac, and to programs Arro writes on Windows. On Windows, Arro refuses a shell command that names one, but the sandbox leaves it readable. The full list is under [Allowed folders](/concepts/desktop-app#allowed-folders). When a program Arro wrote is refused a file, Arro asks for that folder the same way a task does, with **Allow**, **Always allow** and **Deny**. After an approval the program runs again with the new access. When a shell command is refused, the task sees what was blocked and works around it, or asks you for the folder or site it needs. ## On a Mac On a Mac, Audimate uses the sandbox built into macOS. It works on every Mac the desktop app supports. A sandboxed command reaches the internet only through Audimate, which lets through the sites approved for any task running at the time. macOS's own privacy prompts for Documents, Desktop and Downloads still apply on top of the sandbox, as described in [macOS permissions](/concepts/desktop-app#macos-permissions). ## On Windows On Windows, Audimate uses the sandbox built into recent versions of Windows 11. Each command reaches the sites approved for that command. The sandbox needs Windows 11, version 24H2 (OS build 26100.9278 or later) or version 25H2 (OS build 26200.9278 or later). To see your build, open **Settings → System → About** and look at **OS build**. If Windows Update brings your computer to one of these builds, restart Audimate to start using it. Inside the sandbox, commands run in PowerShell, because Git Bash cannot start there. PowerShell 7 from the Microsoft Store cannot start there either, so Arro uses a copy installed another way, or Windows PowerShell. ### On older versions of Windows On Windows 10, and on Windows 11 before these builds, there is no sandbox. Shell commands still run, checked by your Allowed folders, Allowed sites and approval mode alone. Programs Arro writes need the sandbox, so Arro does not run them on these computers. It cannot read Word, Excel or PowerPoint files, or work out totals and filters over a data file. Updating Windows to one of the builds above turns these on. ## Related Choose the folders, sites and approvals for background tasks. Ask Arro to act in your open apps and control when it stops. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.