Built to be trusted with
client work that can’t leak.

All traffic is encrypted in transit with TLS. Data — the database and every uploaded file — is encrypted at rest with AES-256.

Integration credentials (Google, Slack) are additionally encrypted at the application layer with AES-256-GCM before they are stored, so a database read alone never yields a usable token.

Every query in the product is scoped to your agency workspace. There is no cross-tenant read path: your clients, documents, messages, and files are invisible to any other workspace.

Each client portal is a private, unguessable link that you can revoke or rotate at any time — rotation kills the old link and every verified device instantly.

For sensitive clients you can additionally require email verification: the portal will not render until the visitor confirms a one-time code sent to the client's email, once per device. Links can also carry a hard expiry date.

Files live in private storage buckets. There are no permanent download URLs anywhere in the system: every open mints a signed link that expires in minutes.

Every document open and download is recorded — which side opened it, and when. That access trail is visible to the agency on each document, so “who has seen this file” has a factual answer.

The assistant reads client context to draft follow-ups, extract facts, and watch account health. That processing is controllable per client: switching a client to confidential mode stops all background AI processing for them — nothing about that client is sent to a model unprompted.

AI requests are processed via Google's Gemini API and Anthropic's Claude API. Your content is used to serve your requests, not to train foundation models. AI outputs are stored inside your workspace like any other record.

Meaningful events — portal views, document opens, share-link creation, access-setting changes — are written to each client's timeline. Security-relevant changes name what changed and who changed it.

The database, uploaded files and the application run in Mumbai, India (AWS ap-south-1). A workspace that needs its data in the United States or the European Union can ask us; we will tell you before any move.

Supabase (AWS) — database, authentication, file storage. Vercel — application hosting. Google Gemini API and Anthropic Claude API — AI processing. Resend — sending email and receiving the mail your team forwards. Upstash — request rate limiting.

Contacted only if your workspace connects them: Google Workspace, Microsoft (Outlook, Teams), Slack, Meta (WhatsApp, Instagram, Facebook), and Composio for the accounting and work tools you link. The privacy policy lists what each receives.

Your data belongs to your agency. Deleting a client removes their records and files from the workspace. A workspace owner can delete the whole workspace from Settings, and anyone can delete their own account there. See the privacy policy for what is kept and for how long.