Security and privacy

Sign-in

Sign in with Google, Microsoft, e-mail or a company domain; the identity provider confirms it is you. The browser window opens only with a passkey (Windows Hello, Touch ID, Face ID, fingerprint) - a guessed or stolen password is not enough. A session lives 30 minutes without activity, then you sign in again.

Your environment is yours alone

Every person has a separate isolated environment: own files, own agent, own vault for secrets. Environments of one company live in its space; other environments and the platform infrastructure are unreachable from inside at the network level, not just by rules. The agent cannot "ask for" access on its own.

The agent's rights = your rights

The agent acts on your behalf and with your permissions - no more. Connections to company systems are made only with your consent and can be switched off at any time on the "Connections" page.

Secrets

Passwords and keys are kept in a personal vault (HashiCorp Vault), not in files, chats or e-mail. The agent reads them at the moment of use and never shows the values.

The log

Every action of the agent - a command, a file edit, a call to a system - is recorded: who, what, when, with what result. A record cannot be edited afterwards. You see the log of your environment in the window (the scroll button). Other people's logs are not visible to you, and yours are not visible to them.

Where the data lives

Environments run on sysadmins.club servers in the European Union. The model (Claude) receives only the text of your request and what the agent passes to it to solve the task, on your Anthropic account and its terms. Environments are backed up daily.

What we do not do

We do not read your conversations or files unless you ask for help; we do not pass data to third parties; we do not use your data to train models. When you stop, the environment and its data are deleted at your request; you take a copy of the files yourself.