Security & trust
Secure by design.
Agents that act on real accounts need real guardrails. Here is how the platform keeps you in charge, and where the documents are.
The stance
Three promises.
Where your data lives, who decides how AI processes it, and who owns what we build.
Worldwide. The best models, wherever they run. Some are in the US, under EU standard contract clauses.
Alethe s.r.o. is a Czech company. The platform, its database and the backups run in an EU data centre in Germany.
By default the best models run wherever they are, some in the US under EU standard contract clauses. EU-hosted uses EU providers only and switches a few features off.
On bespoke builds the running system is yours: your accounts and your provider keys, handed over with documentation and full access.
Controls
Hands off. Until it matters.
The agents run on their own. These controls are part of the product, not a policy document.
- Gate
Approval gates
Outbound actions like replies, posts and purchase orders can wait for a person. When a gate is set, nothing goes out without you.
Gate · Needs you Publish the Friday post? - Trace
Run traces
Every agent run is visible step by step: which tool ran, in what order, and with what result.
- Budget
A weekly budget
On Personal, Starter and Pro, a week can use up to 30% of the month's credits. At the budget, an owner, admin or billing manager decides: continue, buy credits or upgrade.
Each agent gets the tools and the model its job needs, and nothing more.
Credentials for connected accounts are encrypted at rest with AES-256-GCM, and traffic to the database is encrypted with TLS.
Each organisation's data is kept apart in the database by row-level security. Every plan keeps a 30-day audit log of who did what and when. The Business plan adds the control set: the full audit history and export, custom roles with per-user permission overrides, approval rules with amount limits and several approvers, and single sign-on with Google Workspace (Microsoft Entra ID on request).
Documents
The paperwork, in public.
Nothing to request and no sales call first. The documents are on this site.
What we process, who helps us process it and your rights: the privacy policy and the subprocessors.
Agents tell people they are talking to an AI, as the transparency rules (Art. 50) require. See the AI transparency notice.