Security & trust
An autonomous system earns trust by being careful and honest. Here's how we build that in.
Integration secrets are encrypted at rest with AES-256-GCM and are never returned to the browser. Only the server can decrypt them to make a call on your behalf.
Actions are graded by risk. Reversible work runs freely; anything that spends money, changes pricing, merges to production, or touches customers requires your explicit approval.
Connection status reflects reality. Nothing is shown as connected until credentials are verified, and simulated actions are always labeled as sandbox — never reported as real.
Our crawler is read-only and blocks internal and private network addresses (SSRF protection), validates every redirect, and never submits forms or follows login walls.
Every workspace's data is scoped by identifiers on every query. Members only see the businesses they belong to.
Impact is measured from analytics you connect. When something can't be measured yet, we say so instead of fabricating numbers.