Security & data
How we handle your systems and data.
The controls our robots work under, how we run the systems we host, the on-premises option for AI, and a straight answer about certifications.
Access you can limit. Actions you can check.
Our robots work through the same screens and logins your team uses. These are the controls around them.
Minimal access
We ask only for the access the task needs: read-only whenever the robot only reads.
Your session, not your password
When a robot works in a browser, we prefer to attach it to a session your team already logged into instead of storing a password.
A log of every action
Each robot action is logged, so your team can check what was done, when and where.
One robot at a time per login
When several robots share one login, an orchestrator hands the session to one robot at a time, with a queue and an audit trail.
Run history and failure alerts
For robots that run on a schedule, a dashboard shows every run, and an email alert goes out when one fails.
NDA on request
We sign a non-disclosure agreement when you ask for one.
AI that runs inside your network.
With the on-premises option, documents and model inference stay inside your network. Open models run on hardware you control, and the search index sits on that same machine.
The on-premises option is an architecture choice, not a certification. If you work under health, legal or financial confidentiality rules, your compliance team decides whether it meets those rules.
Ask your documents
Emails and documents, indexed on your server
What did we decide about the scaffolding rental?
Extend the rental by 30 days and ask the supplier for a revised quote by Friday.1 Purchasing follows up, and the site manager approves the new dates.2
Sources
- 1Email · PurchasingOct 21
- 2Site meeting minutes.pdfPage 2
What we do not have.
We do not hold any security certification. We have no SOC 2 report, and we have not been assessed for HIPAA.
If your company requires either, tell us before we book the free automation assessment. We will tell you plainly whether we can work together.
What we offer instead
A walkthrough of every control on this page for your IT team.
An NDA, signed on request.
The on-premises option, when documents cannot leave your network.
What IT teams ask us.
Do your robots store our passwords?
Not when we can avoid it. A robot that works in a browser can attach to a session your team already logged into, so the password stays with your team. When a system needs the robot to sign in by itself, we set up that access with your IT team.
What access do the robots need?
The least the task needs. A robot that only reads a report gets read-only access. A robot that posts invoices needs permission to post them, and nothing beyond that.
Can we check what the robots did?
Yes. Every robot action is logged. Robots that run on a schedule also get a dashboard with the history of every run and an email alert when a run fails.
Where do the robots run?
Where your IT team agrees: on a computer in your office, attached to a browser your team uses, or on a Linux server.
Can you host what you build for us?
Yes. We can host and run what we build, with isolated services, nightly backups, blocking of repeated failed logins and a monthly check of versions against known vulnerabilities.
Can the AI run inside our network?
Yes. That's the on-premises option above: open models and the search index run on a machine you control, with no cloud calls.
Do you have SOC 2 or HIPAA certification?
No. We hold no certification. We explain each control to your IT team so they can evaluate it, and we sign an NDA on request.
Free 30-minute automation assessment
Find the three repetitive tasksthat cost you the most.
In 30 minutes we map the three most expensive repetitive tasks in your operation and tell you what automating them would cost.