Tenant isolation
Business data is isolated per tenant and invisible across tenants.
Security & compliance
Enterprise governance from day one
Digital workers need to get work done — and stay under control. Permissions, data, actions, and deployment are all governable.
Permission policies
Command-level allow / ask / deny policies by role and directory.
Approval for key actions
Commands, files, and external writes require approval; allowlists are supported.
Credentials stay local
Passwords are encrypted on the machine; models only receive one-time handles.
Audit trail
Tasks, verification, permissions, and calls are logged and traceable.
Private deployment
On-premises deployment, offline install, and your own models.
Private deployment and intranet
For teams whose data cannot leave the intranet, or that need their own models and operations.
- On-premises IIS deployment
- Offline installer
- Your own NewAPI / OpenAI-compatible models
- Independent upgrades and backups
Need security review materials?
Contact us for deployment notes, the permission matrix, and our security questionnaire.