Trust Center

Agents and users are only granted access to what they need for a specific task. Nothing more.

Access to tools and services uses scoped, short-lived tokens (not passwords or shared keys stored in code.

Multi-factor authentication is required for all services and infrastructure we operate.

All processing and storage takes place on EU-based infrastructure. Your data does not leave the EU.

Only the data required for a task is passed to the AI. Sensitive context is not included by default.

Your data is kept separate from other customers at every layer.

All infrastructure runs in EU data centres operated by certified providers.

Code written with AI assistance goes through the same review and testing gates as any other code. It cannot be merged automatically.

We track where our code and dependencies come from.

We record what tools were called, when, by whom, and what the outcome was.

For any session, we can reconstruct the sequence of agent decisions and actions.

Unusual agent behaviour (unexpected tool calls, access outside normal scope) triggers alerts.

We treat everything the AI produces as untrusted input. Security rules are enforced by the system) not by instructions to the model.

If an agent reads a file, email, or webpage, that content cannot secretly redirect what the agent does.

We assume prompt injection attempts will occur and architect accordingly) rather than trying to block every variant.

How independently an agent acts is a setting (agreed with you upfront. The default is cautious.

We distinguish between low-risk reads and high-risk writes or sends. Different rules apply to each.

Certain actions are blocked at the system level) no instruction to the model can change this.

Agents can only call tools that have been explicitly permitted. There is no general-purpose access.

When agents run code or scripts, this happens in a sandboxed environment with no access to your broader systems.

Before an agent sends a message, deletes data, or runs code, a human confirms. This is enforced, not optional.

We don't rely on telling the AI to behave. Boundaries are technical (the AI cannot act outside them regardless of what it is told.