Security
Discretion is the product.
This industry runs on privacy. Here is exactly how the system protects yours, in plain language, with nothing aspirational.
SEC-01
Access is invite-only
- No public signup exists. Every account is created by hand.
- An email allowlist backs up authentication: a valid login with an unlisted email is treated as logged out.
- The allowlist is enforced twice, at the edge middleware and again inside every server route.
SEC-02
Your data is isolated
- Chat history is keyed to your user with row-level security in the database.
- Answers are generated only from the vault's content. There is no cross-tenant anything.
- Your data is not used to train models.
SEC-03
The public site reveals nothing
- The real knowledge graph is served only behind authentication.
- The constellation on the landing page is a scrubbed derivative: re-keyed ids, generic labels, no titles, no note paths. A validator hard-fails the build if identifying strings leak into it.
- Names of models, personas and internal strategies never appear on public surfaces.
SEC-04
Infrastructure
- Served from Vercel's London region over HTTPS.
- Authentication and database by Supabase.
- Waitlist submissions are write-only from the public site: no public read path exists.
SEC-05
Your connected tools
- Keys you paste are encrypted before they are stored, with the encryption key held outside the database — a copy of the database alone does not open them. A key is never shown again after you save it; the last four characters are all that comes back.
- The connection is read-only by construction, not by policy: every request must match an allow-list of exact endpoints, and anything that moves money or posts on your behalf is refused before it is sent.
- Real-time deliveries from a provider are rejected unless they carry a valid signature computed over the exact bytes we received, with a secret unique to your organisation.
- Disconnecting deletes the key and the data pulled with it, in one action.
“We built the public site assuming a competitor would read every pixel of it.”
Security questions get direct answers, including "we don't do that yet."
A few agencies at a time. On purpose.
Access stays invite-only while founding agencies onboard. Request a slot and we'll reach out when one opens.
Reviewed by hand · no auto-responder · one email when a slot opens