Your data stays yours.

• Single-tenant. Your brain runs in its own environment. It doesn't share a database, storage or index with any other client. We set up its accounts in your company's name, so you own them from day one.
• US-hosted. Data stays in US cloud regions. AI requests run in the US only.
• Yours to take. If we part ways, we hand over all access, or delete your data. See section 07.

Not ours, not anyone's. We use Anthropic and other leading AI models, always under business terms that don't train on your data. It's written into our agreement with you.

Retention. Some AI providers keep requests for a short time to check for abuse, up to 30 days on some newer models (AWS (opens in a new tab)). Where your rules require it, we choose models and settings with zero retention.

• In transit: TLS 1.2 or higher on every connection. AWS requires TLS 1.2 and recommends 1.3 for its services.Source: AWS (opens in a new tab)
• At rest: databases, files and backups are encrypted with AES-256. Our database runs on Supabase, which encrypts all data at rest with AES-256 and uses TLS 1.2 or higher in transit.Source: Supabase security (opens in a new tab)

• You choose. You pick the systems, inboxes and folders we connect. Leave out anything you want, and turn any connection off later.
• Read-only to start. We ask for read access first. Write access, like drafting into your accounting system, comes later, one job at a time, with your OK.
• Your credentials, your control. Connections use the official sign-in and permission screens your software provides, wherever it offers them. You can revoke them in that software at any time.

• Your team. The brain answers by role. A tech can ask about a job and never see the books. A bookkeeper can see invoices and not payroll. You set the rules, and you can change them.
• Second Shift. Access is by role. Only Mac, plus our machine learning engineer on a complex build, gets in, and only to what setup or a fix needs.
• Nobody else. We don't sell or share your data.

The brain answers your team's questions. It drafts follow-ups, reminders, reports and replies. Nothing goes to a customer, client, carrier or agency until a person on your team approves it. Every answer shows where it came from. When the brain isn't sure, it flags a person instead of guessing.

AI drafts. Your people decide.

• Yours. You own your data, the brain and what we build for you. The accounts it runs in are in your company's name.
• No black box. We show you how every piece works.
• If we part ways, you choose. We hand over all access: the accounts, the setup, the code, the connections and the documents. Or we delete all your data and confirm it in writing.

We'll tell you within 8 hours of finding any security incident that touches your data, with what happened and what we're doing about it.

Every company that touches your data on our side, and what we use it for.

• SOC 2. We don't hold SOC 2 yet. The companies we build on do, including AWS, Supabase and Anthropic.
• Your questionnaire. Send it over. We'll fill it out, line by line.
• Health records. We sign a business associate agreement (BAA).

We don't give legal, tax or compliance advice, and your duty stays yours. Here's what we give you to meet it.

• Law firm: ABA Formal Opinion 512 on AI and client confidentiality. What we give you: never used for training, single-tenant, sources on every answer, and a person approves everything that goes out.
• Accounting or tax firm: IRC 7216 and the FTC Safeguards Rule. What we give you: read-only to start, access by role, and a vendor you can oversee, with this page and our questionnaire answers.
• Insurance agency: only licensed staff advise or bind. What we give you: the brain drafts. Licensed staff decide.
• Financial advisor: SEC books-and-records rules. What we give you: drafts go out through your own archived systems, so your archive keeps them.
• Anyone with health records, such as PI firms: HIPAA. What we give you: we sign a business associate agreement (BAA).