Trust
Encrypted. Isolated. Deletable.
Your data is encrypted, isolated, and deletable by design — built for PDPA compliance across Southeast Asia, operated from Singapore.
Copies a machine-readable summary of every claim below, so your own AI can evaluate the posture.
Personal data
Your personal details never reach an AI model in plaintext.
Personal data — emails, phone numbers, government IDs, bank details — is tokenized into an encrypted vault at the moment it is written. What flows through the platform afterwards are meaningless reference tokens; an AI model sees masked placeholders, never the real values. A second regex masking layer catches personal details typed directly into prompts.
An attacker reading application tables would find reference tokens, not your customers' details.
Isolation
One tenant's data gives zero access to anyone else's.
Every row is tenant-scoped and every write goes through one audited execution path that enforces the scoping structurally — there is no query lane that crosses tenants without an explicit, consent-gated door. The B2B network (SBIN) matches on pseudonymised operational signals; no other tenant ever sees your revenue, expenses, or customer list.
Access
No passwords to steal.
Sign-in is passwordless (magic link). Sessions expire automatically and rotate on refresh. Agent access uses separate scoped tokens that never double as human sessions — and critical AI-initiated actions pause for human approval on the trust ladder.
Portability
Your data is never held hostage.
Contacts export as CSV in one click. Invoices and quotes render as print-ready documents — save them as PDF from your browser. Everything else is a request away (privacy policy, §10 portability) while the one-click export is still being built. Deletion is a real operation — your data, your keys, your files.
Honest limitations
What we don't claim.
No third-party audit yet. We've designed for SOC 2 and ISO 27001 from day one; independent certification is planned as we scale. Until then, this page describes architecture, not certificates.
Uploaded files are stored encrypted, not redacted. We tokenize the data we extract from your documents, but the original files remain intact in encrypted storage.
Sub-processors exist. AI providers and infrastructure vendors process data under contract — the full current list is at /sub-processors, and the processing terms at /dpa.
Ready to try? Still skeptical?
Read the privacy policy, the data processing addendum, or hand this page to your own AI with the button above.