Security

How AI Buddy protects company work

Last updated July 18, 2026

Company isolation

Company data is separated by organization identifiers, database row-level security, private object storage, and server-side authorization checks. Automated adversarial tests verify that one company cannot list another company’s records or storage objects.

Controlled execution

Each approved run is tied to a company, user, immutable skill version, and attempt. Work executes in a disposable isolated workspace. Permanent model credentials do not enter that workspace; it receives a short-lived, run-bound broker credential.

Limits and cost protection

Run creation, queue depth, concurrency, compute time, AI request count, and requested output tokens are capped. Company AI access defaults to disabled. A company-specific key reference and non-zero hard cap must be explicitly enabled before paid AI calls can occur.

Files and outputs

Customer-file routes fail closed in production until an approved malware scanner is configured. Input content exists only while its authorized run is active, then its private object and identifying filename are deleted before finalization. Outputs remain private for the company’s delivery period. Browser HTML previews are authenticated and sandboxed to block scripts, forms, navigation, and remote resources.

Authentication and auditability

Access is invitation-only. Privileged roles require a verified second factor. Authenticator apps are recommended; a short-lived code sent only to the account’s invited email is available for ordinary workspace access. High-risk platform changes still require authenticator verification. Important actions and lifecycle changes are recorded against company, user, run, attempt, skill version, and output identifiers.

Reporting concerns

Active pilot companies should report a suspected security issue through their named pilot contact and avoid including sensitive files in the initial message. We will verify the reporter, preserve evidence, contain access where necessary, and coordinate next steps.