── Security

Built to be trusted.
Locked down by default.

Your agents act on your business — your leads, your money, your customers. So every action runs behind approval gates, encrypted access, rate limits, and a logged trail of everything they do. No black boxes. Here’s exactly how.

Every layer, hardened
🛂
Human approval gates

Sensitive actions pause for your one-tap yes or no. Nothing risky — an email, a payment, a post — goes out without your sign-off.

🔐
Encrypted credentials

Every OAuth token is sealed with AES-256-GCM at rest. Your keys are never shipped to the browser, and never shared between workspaces.

🧱
Tenant isolation

Row-level security walls off every workspace. Your leads, messages and money are yours alone — no cross-tenant reads, ever.

🛡️
Fail-closed webhooks

Every inbound webhook is signature-verified (Meta, Paystack). A forged or unsigned call is rejected at the door, not processed.

🚦
Rate-limited & auto-banned

Every request is throttled at the edge before it reaches your data, and IPs that keep hammering us are auto-banned. Floods get stopped, not served.

📜
Full audit trail

Every action that spends a credit is logged — who, what, when, and what it cost. Nothing your agents do runs silently.

Your keys stay yours.

Connect a tool with one click, disconnect it any time. We store the minimum we need, encrypt what we keep, and never sell your data. You can request full deletion whenever you want.

See our Privacy Policy and Data Deletion policy.

Straight talk

Your agents are boxed in by what you allow — approval gates, encrypted access, rate limits, and a logged trail of everything. We don’t claim badges we haven’t earned. What you see here is what’s actually running.

Secure by default.

Approval gates on by default · Encrypted credentials · Full audit trail

Start free →