Trust and security
What we protect, and what we have not built yet.
Rudran runs code that a language model wrote, on a machine with real tools. That is only reasonable if the isolation and the stopping points are real. Here is what they are.
Isolation
One sandbox per agent
Every agent runs in its own container with its own filesystem, shell and process space. One agent cannot see or reach another agent's machine.
Workspace-scoped data
Agents, threads, documents and usage are scoped to your workspace. Access is checked on every read and write, not only at sign-in.
Sandboxes hibernate
An idle agent is suspended rather than left running, which shrinks both the cost and the exposed surface.
Egress policy is built, not yet enforced
An allowlisted, CONNECT-only filtering proxy with SNI pinning is built and tested. It is not switched on in production yet, so today a sandbox is not network-restricted. We would rather say that here than let you assume otherwise; this line changes when enforcement does.
Human control
The approval gate is enforced on our servers, not by asking the model nicely. A sensitive action does not execute until a human decision is recorded against it, and the gate fails closed — if the platform is degraded, the action does not slip through.
Underneath that sits a hard safety floor: a class of destructive commands is refused outright regardless of what the agent, its playbook, or anything it read on the web asks for. It has fired in production.
Supervision is set per agent, so an agent doing research and an agent touching your systems do not have to share a policy.
Your data
Export
Export your data from settings at any time.
Account deletion
Delete your account from settings. It is removed from service immediately; the final erasure of the underlying records is still a manual step for us while we are pre-launch, so ask and we will confirm when it is done.
Threads are archived, not deleted
Archiving keeps the record of what an agent did rather than destroying it. You can always retrieve an archived thread.
Model providers see your prompts
The model you choose for an agent receives that agent’s context in order to answer. Choosing the model means choosing who processes that content.
What we do not have yet
We have no SOC 2, ISO 27001, or any other compliance certification, and no audit is under way. When one starts, this page will say so with a date.
We do not publish an uptime figure or offer a service level agreement. We would rather publish nothing than publish a number we cannot yet stand behind. System status is available if you want to watch it.
Audit-log export is built — owner and admin roles can export the org's audit trail as JSON or CSV. Single sign-on and customer-managed encryption keys are not. If your organisation needs them, tell us and we will tell you honestly where they sit.