Security
Version 2026-09-29, effective 2026-09-29
The guarantee
An agent never holds a working handle to anything that changes the world. It cannot send an email, issue an invoice, or publish a post by calling a tool that actually does it. Every such action starts as a written proposal. A fixed set of checks — always the same checks, in the same order, for every tenant — then decides whether it goes through automatically, waits for a person, or is refused outright.
The approval queue
Anything an agent proposes that is not automatically allowed sits in a queue for a person to decide. Approving something above a certain amount, and approving several things at once, both require you to re-prove who you are on the spot — on purpose, because approving a batch of things at once is the easiest way to rubber-stamp something you haven't actually read. There is never a link in an email or a push notification that approves anything by itself; the decision always happens inside the product.
Handing work to another agent
Open today
One agent can ask another to do something, inside pairs you declare yourself. A handover is an action that goes through the same approval gate as any other, never a message. The chain's limit is always the lowest of its members, and anything untrusted that any member touched follows the whole chain.
The audit trail
Every decision — automatic or human — is written down in the same instant as the change it describes, chained cryptographically to the decision before it so a gap or a rewrite would be detectable. It records exactly which version of an agent's instructions and which piece of your own knowledge produced that decision, so “why did it do that” always has a real, specific answer.
Where your data lives
Your workspace is hosted in Frankfurt, Germany — a named country, not a general “Europe” region a provider could quietly resolve somewhere else. 8 outside companies currently touch it on our behalf, 6 of which have a data processing agreement in force with us today — named, with what they do and where, on our sub-processors page.
The data processing agreement
Open today
The data processing agreement is available to read and accept. The workspace owner accepts it before any payment is set up, and we record which version was accepted and when.
Read the actual document, whether or not one has been published yet, on our data processing agreement page.
If something goes wrong
If a personal data breach affects your data, we tell you without undue delay after we become aware of it, and in any event in time for you to meet your own 72-hour obligation to report it to your regulator. You hold that duty as controller; ours is to get you clear, accurate information fast enough that you can.
Support access
You are notified whenever a support session against your workspace opens. Support can always see that something happened; seeing the actual content of what happened is a separate permission we ask for. Every support session is time-limited, fully logged, permanently read-only, and can never approve anything on your behalf.