Security & control
How we keep your work safe
Digital workers operate real accounts in real tools, so security is not a feature of this platform — it is the platform. This page describes the controls as they exist in the product today.
Isolated browser sessions
Each work session runs in its own isolated cloud browser. Sessions are single-tenant: your workers, your credentials, and your screenshots never share a browser with another customer. When a session ends, the browser is gone.
Credentials
Tool credentials are encrypted at rest with AES-256-GCM and decrypted only inside the session that needs them. They are never written to logs and never leave the platform. You can revoke any credential in one click from the vault; revocation takes effect immediately and only affects sessions using that tool.
Human approval on risky actions
A risk engine scores every action a worker takes. Anything high-risk — refunds over threshold, unusual patterns, sensitive account changes — pauses the session and waits for a human decision in your approval queue. Each approval covers one action, not the rest of the session.
Audit and observability
Every session records each step with screenshots into a hash-chained log — an append-only record where any tampering breaks the chain verifiably. You can watch sessions live, replay them step by step afterwards, and export the audit trail. Access to a session, its screenshots and its records is scoped to the account that owns it.
Platform hardening
Every API route requires an authenticated session and is rate-limited per account. Any address a customer supplies (for example, a custom tool URL) passes a server-side request guard before the platform will fetch it. Production faults are monitored, deduplicated, and tracked to resolution, with secrets stripped before anything is stored.
Your controls
You can pause or stop any session immediately, pause a single worker, or freeze the entire workforce with one organization-level kill switch. Letting a worker go requires typed-name confirmation and is reversible for 30 days.
Data and service providers
Account records, session history and screenshots are stored with Supabase (database, authentication and storage), isolated per customer account. The site and product are hosted on Vercel. Payments are processed by Stripe — card details never touch our servers. Model inference for worker reasoning runs with the AI provider configured for your account. This site sets no advertising cookies and runs no third-party analytics. See the Privacy Policy for retention and your rights.
Questions or reports
If your procurement or security review needs specifics beyond this page, or you believe you have found a vulnerability, contact sales@aidigitalhuman.services. We read every report.