I work for a large company that used Postman extensively. We have recently been ordered to remove Postman in lieu of a client that does NOT store data in the cloud due to security concerns.
Are there any plans to restore this (local storage) functionality? My team and many others would prefer the Postman tooling over alternatives like Bruno, but cannot justify given our security posturing.
Hey @bartnike
Welcome to the Postman Community! 
The signed out Lightweight API Client is our local version, it has limited functionality but give you the ability to build requests from many different protocols, to test your APIs.
For all the all features you would need to be signed in to an account.
At the most basic level, I would recommend that you’re not storing or hardcoding any sensitive data in your Collections. Make full use of the variables and store information in the Current Values so that it’s only available on your machine.
Additional, the Postman Vault should be used to store your sensitive data, it’s your own locally encrypted data store.
What are the security concerns that the company has, have they tried reaching out to us to walkthrough these and provide more information?
We have very large customers across multiple sectors and industries that we have been working with for a number of years - Each of these have their own concerns in those areas and working with our team has provided them with the details around the storage of data.
We not only have the Security and Trust section on our website - we also have our Trust Center which contains all the information of our product security, regulatory compliance and standards which we are audited against.
If you’re working for a large company, it feels like moving on to a higher tier of license would provide your team with more advanced security and API Governance capabilities that come with those.
Last time I used postman was in 2021 I think. I just had a meeting with my client where I bragged how great postman was. Only to find all these posts with the postman users raising their concerns about not being able to protect their data locally. Postman, have you gone mad? No security conscious corporation can use your soft. I have to tell my client to disregard everything I said about postman. Looking for an alternative… I will write my own code if needed but I cannot use postman at the moment.
Create a paid option that guaranties my data is not going anywhere near your storage. Then we can talk.