Security
How AI Buddy protects company work
Last updated July 18, 2026
Company isolation
Company data is separated by organization identifiers, database row-level security, private object storage, and server-side authorization checks. Automated adversarial tests verify that one company cannot list another company’s records or storage objects.
Controlled execution
Each approved run is tied to a company, user, immutable skill version, and attempt. Work executes in a disposable isolated workspace. Permanent model credentials do not enter that workspace; it receives a short-lived, run-bound broker credential.
Limits and cost protection
Run creation, queue depth, concurrency, compute time, AI request count, and requested output tokens are capped. Company AI access defaults to disabled. A company-specific key reference and non-zero hard cap must be explicitly enabled before paid AI calls can occur.
Files and outputs
Customer-file routes fail closed in production until an approved malware scanner is configured. Input content exists only while its authorized run is active, then its private object and identifying filename are deleted before finalization. Outputs remain private for the company’s delivery period. Browser HTML previews are authenticated and sandboxed to block scripts, forms, navigation, and remote resources.
Authentication and auditability
Access is invitation-only. Privileged roles require a verified second factor. Authenticator apps are recommended; a short-lived code sent only to the account’s invited email is available for ordinary workspace access. High-risk platform changes still require authenticator verification. Important actions and lifecycle changes are recorded against company, user, run, attempt, skill version, and output identifiers.
Reporting concerns
Active pilot companies should report a suspected security issue through their named pilot contact and avoid including sensitive files in the initial message. We will verify the reporter, preserve evidence, contain access where necessary, and coordinate next steps.