Security

Built for marketing teams that get audited.

SOC 2 Type II. End-to-end encryption. Your data is yours, end of story.

🔒 SOC 2 Type II🔒 GDPR🔒 CCPA🔒 DPA on request

Principles

Encrypted everywhere

TLS 1.2+ in transit. AES-256 at rest. Keys rotated and managed in a dedicated KMS.

We don't train on your data

Prompts, files, and outputs are never used to train any model — ours or third-party.

Scoped Slack permissions

Martoshi only listens in channels you invite her to. Granular per-tool scopes.

Audit logs

Every prompt, tool call, and deliverable is logged with a tamper-evident trail.

Region-aware processing

EU and US workloads route through region-pinned infrastructure on Enterprise.

Least-privilege by default

Engineers can't read your data. Production access is just-in-time and reviewed.

Sub-processors

We keep this list short and current. Enterprise customers get advance notice of changes.

AWSOpenAIAnthropicSlackVercelLinear
Request our security pack →