Security & data
Agents never hold your credentials.
One separate service makes every change, and only after your rules pass it. This page covers that service’s access, the data agents read and the log.
Seven facts about how it’s built.
- 1
A separate workspace per company
Each company is its own workspace, with its own settings, agents, library and record. Its agents act only through that company’s rules, and everything they do is written to that company’s record.
- 2
Agents hold no credentials
An agent’s tools read data and propose actions. None of them can change an account, and no agent is ever given the credentials to your ad or email accounts.
- 3
You sign in on the platform
Accounts connect through each platform’s own sign-in (OAuth). You never give us your ad or email passwords, and you can revoke access at any time.
- 4
One service makes changes
A single service, the executor, makes every change to your accounts, and only after the change passes your rules. It alone holds your account access, and uses it only to make a change that passed.
- 5
Rules run again before a change
When you approve a proposal, the policy engine runs every rule again, against that moment’s spend and settings, before the executor makes the change.
- 6
Every action is audited
Each action records who proposed it, why, which rules it was checked against, who approved it, and what happened. Proposals the rules stopped are recorded too.
- 7
One button stops everything
The stop button pauses every agent at once. Campaigns keep their last settings in your own accounts.
At a glance.
- What agents read
- Performance and conversion data from the accounts you connect, plus your briefs, rules and library.
- Account access
- Used only by the executor and never given to agents.
- Your campaigns
- Live in your own ad and email accounts, and keep running at their last settings if you stop.
- Access
- Granted through each platform’s own sign-in, and revocable at any time.
Check the rules yourself. The rules page lists every one, with its default and what it records when it stops something.
Questions about access.
- What access does it ask for?
- Standard API access to your ad and email accounts, granted through each platform’s own sign-in. Agents never hold those credentials. They propose changes, and a separate service makes each one after checking your rules again.
- What happens to my record if I stop?
- Agents stop acting immediately. Your record of every action, with who proposed it, why and who approved it, remains yours.
One to try in the demo
Only approved images and copy go out.
Approve the creative desk’s three brewing-gear images, and the New Customers agent proposes a launch that uses them. Each ad names the library image and copy it uses. Approving the launch rechecks each one and reruns your spend limits before anything goes live.
Read more.
More on control, the full list of rules, and what this website keeps when you join the beta.
See every check in the demo before you connect anything.
Questions about security? Ask them in the beta form’s note.