Security
How we handle your access and data
The practices below apply to every engagement. More detail is available on request.
Least-privilege access
Named accounts, scoped to what each task needs, granted inside your own tools. Access ends when the work does.
Your accounts, your credentials
Keys and tokens live in your own secrets manager. We do not keep copies of your production credentials on our systems.
A person approves what matters
Automations that email customers, move money or change records run beside your team first, and anything with real consequences needs an approval step.
Logs you can read
Every automated action is logged in plain language, so you can see what ran, when, and why.
Data stays where it is
We work with your data in place where we can, and delete any working copies when the engagement ends.
NDA on request
We sign a mutual NDA before seeing anything sensitive.
Tell us what you're trying to build
A 30-minute conversation about the work that costs you the most time. If automation or a new website is the right fix, we will say so; if not, we will say that too.