Security

The guarantee

An agent never holds a working handle to anything that changes the world. It cannot send an email, issue an invoice, or publish a post by calling a tool that actually does it. Every such action starts as a written proposal. A fixed set of checks — always the same checks, in the same order, for every tenant — then decides whether it goes through automatically, waits for a person, or is refused outright.

The approval queue

Anything an agent proposes that is not automatically allowed sits in a queue for a person to decide. Approving something above a certain amount, and approving several things at once, both require you to re-prove who you are on the spot — on purpose, because approving a batch of things at once is the easiest way to rubber-stamp something you haven't actually read. There is never a link in an email or a push notification that approves anything by itself; the decision always happens inside the product.

The audit trail

Every decision — automatic or human — is written down in the same instant as the change it describes, chained cryptographically to the decision before it so a gap or a rewrite would be detectable. It records exactly which version of an agent's instructions and which piece of your own knowledge produced that decision, so “why did it do that” always has a real, specific answer.

Where your data lives

Your workspace is hosted in Frankfurt, Germany — a named country, not a general “Europe” region a provider could quietly resolve somewhere else.

If something goes wrong

We notify you of a data breach affecting you within 24 hours of discovering it. You hold the duty to report it to your own regulator; ours is to get you clear, accurate information fast enough that you can.

Support access

You are notified whenever a support session against your workspace opens. Support can always see that something happened; seeing the actual content of what happened is a separate permission we ask for. Every support session is time-limited, fully logged, permanently read-only, and can never approve anything on your behalf.