Security and data
What we do with your data, stated plainly.
No badges we have not earned. Everything on this page describes how the platform is built today.
Ownership and export
Your site can be exported as files and your contacts and leads as a CSV at any time from your account. Leaving is a download, not a negotiation.
Workspace isolation
Every business is a workspace. Sites, contacts, content, credits and the workforce's memory are scoped to it; agencies see only the workspaces they manage.
The approval gate
The workforce cannot publish, post or send on its own. Finished work is reviewed by the manager agent for alignment, metadata and provenance, then waits for you. Rejected work returns to draft and is excluded from bulk actions.
A ledger for every email
Every message the platform sends is recorded with its purpose, recipient and provider outcome. Bounces and suppressions are visible, and marketing email is not part of the product.
TLS everywhere
Your account, your published sites and every subdomain are served over HTTPS with automatically provisioned certificates.
Agents never hold your credentials
The workforce works inside your account through the platform's own services. It does not receive your passwords and does not log in to third-party tools on your behalf.
AI providers and your data
The workforce uses third-party language and image models to do its work. Your briefs and content are sent to those providers to produce the output you asked for, under their business terms, and are not used by us to train models. The AI disclosure lists the current providers.
Incidents
If something goes wrong with your data, you hear it from us first: what happened, what was affected, what we did, and what changes. Write to [email protected] to report a security concern.
What we do not claim
We do not hold a SOC 2 report or an ISO certification, and we do not print uptime percentages we have not measured over time. The status page shows live checks only. When we earn a certification it will appear here with its date.