skyseatSecurity and privacy
What we do today to protect your company’s data, with no fine print. And what we don’t have yet.
- Data in the EU: the platform and its database run in Helsinki, Finland; your AI employees’ computers, in Germany.
- Every company kept apart: no one sees another company’s data, and automated tests check it.
- One computer per AI employee: never shared with anyone.
- Credentials in a vault: the employee’s computer never sees them.
- An Activity log that can’t be erased: download it, signed, for an audit.
- A person in charge: they approve what matters, and 3 safeguards are always on.
Where your data lives
The platform (the dashboard, the database, and the vault) runs on a Hetzner server in Helsinki, Finland. Your AI employees’ computers run on Hetzner servers in Germany. We back up every day and keep each backup for 14 days. Everything between your browser and the platform is always encrypted (HTTPS).
To think, your AI employee uses an AI model (Claude, from Anthropic) based in the US. It only gets what each task needs, and we use Anthropic’s commercial API, which doesn’t train its models on what it receives. We don’t use your data to train any model either.
This website is hosted on Vercel and gets no data from the platform or your AI employees. It has no cookies and no analytics.
Every company kept apart
- Each company has its own employees, tasks, Inbox, memory, and Activity log. If anyone asks for something that belongs to another company, the platform answers as if it didn’t exist.
- An automated test goes through every page and route of the dashboard trying to read and change another company’s data. New routes are added to it automatically.
- If you’re an agency, each client is a separate company: a client can’t see the agency or its other clients.
- People have a role (admin, manager, or view only), and view-only people can’t change anything.
One computer per AI employee
Each AI employee works on their own cloud computer: a server just for them, not shared with other employees or other companies. Their files and their browser stay there.
Their computer connects to the platform with its own access, which only works for their tasks and their company. If you let them go, that access is revoked instantly. And when they have no work, their computer shuts down.
Credentials in a vault
- Passwords and keys for the services you connect (Microsoft 365, Google Workspace, your invoicing software, your online store…) are stored encrypted (AES-256-GCM) in your company’s vault. The key that opens it is kept outside the database.
- The employee’s computer never sees them. When it needs something from those services, it asks the platform, which checks it has permission, makes the call, and records it in the Activity log.
- If an AI employee creates an account on a service, the password goes into the vault. It never shows up in their conversation or in the Activity log.
- People’s passwords are stored with scrypt: not even we can read them. No one picks a password for someone else: new people get a single-use link.
An Activity log that can’t be erased
Everything your AI employees and your people do goes into the Activity log: what was done, when, with which account, and who approved it. The database doesn’t allow its rows to be changed or deleted.
You can download the Activity log for any period as a PDF, CSV, or JSON file for an audit or an inspection. It’s signed (Ed25519) and its rows are chained by their hashes: if anyone changes, removes, or adds a row, it shows. It helps you show what was done and who supervised it; on its own, it isn’t proof that you comply with the law.
A person in charge
You decide how much freedom each AI employee has: Supervised (asks before everything), Automatic (asks before sensitive actions), or Full autonomy (doesn’t ask; reports what they do). Whatever needs your OK reaches your Inbox and your phone, and you can watch their screen or take control at any time.
At every level, Full autonomy included, 3 safeguards are always on:
- Money. A monthly spending cap and a per-action cap: anything over it waits for a person. Plus your plan’s limits.
- Law. Anyone who talks to your AI employee by phone, email, or in a meeting knows they’re talking to an AI, and their instructions include GDPR.
- Activity log. Everything is recorded, including what was approved automatically.
And there are things they never do: get past a “prove you’re human” check (they hand it to you) or issue refunds or charges in your online store. Anything asked of them by phone always waits for a person to approve it.
Your data is yours
- You can download all your company’s data from the dashboard, and each person can download their own.
- If you close your company’s account, everything is deleted after 30 days: employees and their computers, tasks, memory, connections, calls, and the Activity log. Until then, you can change your mind.
- Calls are deleted automatically after 90 days, and the voice provider deletes each one as soon as we’ve saved it.
- We sign a data processing agreement with you: you decide what the data is used for, and we only process it to provide the service.
Who else is involved
These providers process data to deliver the service, under contract and only for that. We give you 30 days’ notice in the dashboard before adding or changing one.
| Hetzner | Servers for the platform and the computers, and backups. In the EU (Finland and Germany). |
|---|---|
| Anthropic | The AI model (Claude): gets what the employee needs for each task. In the US. |
| ElevenLabs | Voice and call transcription, only if you turn on the phone or voice. In the US. |
| Twilio | Phone numbers and lines, only if you turn on the phone. In the US. |
| Better Stack | Technical server logs and uptime monitoring. They may include IP addresses. In the US. |
| Browser notifications | They deliver notifications to your phone, only if you turn them on. The content is end-to-end encrypted: they only see which device it goes to. |
Anything that goes to the US is covered by GDPR safeguards. Every provider, with its country and safeguard, is listed under subprocessors. The services you connect yourself (Google, Microsoft, Slack…) aren’t our providers: they’re yours, under their own terms.
What we don’t have yet
- Certifications. We don’t have ISO 27001 or SOC 2 yet. We review the platform’s security thoroughly before opening up and with every new feature, but that isn’t the same as an external audit.
- Legal documents in draft. The privacy policy, the terms, and the data processing agreement are being reviewed with legal advisors.
- Some connections in the works. The phone, each employee’s own email, WhatsApp, and Microsoft 365 and Google Workspace still run in test mode. We’ll share it in What’s new when they’re live.
Already a customer and have a question, or spotted something odd? Write to us from the dashboard, under Help and support, anytime: we’ll reply within a few hours. And to see whether everything is working right now, check the status page.
Last reviewed: October 29, 2026.