Security
Every crewmate has a badge. And doors it can’t open.
Crewmates get their own seat in each tool, with only the permissions you give them. Anything that sends, pays or deletes waits for a person, and every move goes on the record.
SOC 2 Type II
GDPR
EU hosting on Fleet
Never trained on your data
Permissions
Who can touch what.
Click any cell: read & draft, asks first, no access. That’s the whole model.
Read & draft: can look and prepare, never send
Asks first: waits for an Approve
No access: the seat doesn’t exist
Your data
It stays yours. Here’s the sheet.
The short version of our data processing agreement. The long one is available on request through the contact page.
Where
US by default, EU on Fleet
US by default. EU hosting is available on Fleet, with a dedicated deployment if you need one.
Encryption
AES-256 at rest, TLS 1.3 in transit
Keys rotate every 90 days. Tool tokens are stored in a separate vault.
Retention
You set it
From 30 days (Starter) to unlimited (Fleet), per tool. Deleting a workspace deletes everything within 30 days.
Training
Never
Your data is never used to train models, ours or anyone else’s.
Access
Least privilege
Two engineers can reach production, with your written OK and a logged reason.
On the record
Every move, every yes, with a link back.
Filter by crewmate. Export to CSV or stream it to your SIEM on Crew and Fleet.
All
Ada
Milo
June
Theo
14:02:11
June
sent refund
Order #8812
duplicate charge
Dana R.
14:01:47
Ada
updated field
Halden / Health
3 tickets in 7 days
auto
14:01:30
Theo
replied
Ticket #4821
known fix, docs linked
auto
14:00:58
Milo
sent email
38 renewals
due before Dec 19
Dana R.
13:59:12
June
matched
INV-2204
amount and reference
auto
13:58:40
Ada
added note
Copperline
new VP of Ops
auto
13:57:03
Theo
issued credit
Tessel · $40
charged twice
Kofi M.
13:55:21
Milo
booked call
Fieldnote · Thu 10:30
seat upgrade
auto
Certifications
Audited by people who don’t work here.
Reports and certificates are shared under NDA.
SOC 2 Type II
Audited every year
Pen tested
Yearly, third party
GDPR
DPA on request
DPA
Signed on request
Security questions
Your security team will ask these.
Can a crewmate act outside its seat?
Theo
No. It only has the scopes you granted in each tool. If a task needs more, it asks, and you can say no.
What if a crewmate gets it wrong?
Theo
Undo is one click and goes on the record too. Tell it why, and the rule updates for next time.
Do you use our data to train models?
Ada
Never. Not ours, not our model providers'. It's in the contract.
Can we run a security review?
Theo
Yes. We share our SOC 2 report, pen test summary and DPA under NDA, and answer questionnaires within a week.
Bring your security team. We’ll bring the paperwork.
Start a trial in a sandbox workspace, or ask for the security pack first.
