Hosted in Singapore
The database runs on Neon in AWS Singapore and the application on DigitalOcean in Singapore. Email goes out through Amazon SES in the same region.
Security
Built to hold the keys to your business
Agents act with your credentials, so three things must never leak: your data, your credentials and your authority. Each has its own controls, and none of them relies on an AI model behaving well.
Your data
Stored in Singapore, walled off from everyone else's
Every customer isolated
Row-level security in the database binds every request to one account, so a query can't return another customer's rows even if our code forgets a filter. Automated tests try to read and write across accounts to prove that isolation holds.
An audit log you can trust
Every change and every agent action is written to an append-only log. Each entry is chained to the one before it, so any tampering shows.
No training on your data
Everdeck doesn't use your content to train or fine-tune AI models. With your own keys, your provider's terms cover what agents send it.
Your credentials
Encrypted with your account's own key
Model keys, OAuth app secrets and app tokens are sealed with AES-256-GCM using a data key that belongs to your account alone. That key is itself protected by AWS KMS, so a copy of our database reveals none of your secrets.
- A secret is decrypted only inside the step that uses it, then dropped.
- After you save a secret we show only its last four characters. There is no way to reveal it; you can only replace it.
- Secrets are scrubbed from logs and anything an agent sees.
- Each ciphertext is bound to its account, so a value copied into another account can't be decrypted there.
Signing in
Two-factor for every person
- Everyone sets up a passkey or an authenticator app when they sign up, and gets ten single-use recovery codes.
- New passwords are checked against known breaches without the password ever leaving our servers.
- Changing credentials, approval rules or billing, and deleting connections, MCP and API servers, files or knowledge documents, asks for your second factor again.
- See every signed-in device and sign any of them out. We email you when a new device signs in.
Your authority
Agents can't do more than you allow
Every action an agent takes passes the same checks, whatever model it runs on.
A policy check on every call
Agents see only the tools their charter grants. Each call is checked against your policies first, and risky ones wait for approval tied to the exact details.
Limits no setting removes
Moving money, deleting data and changing permissions always need a person. No one approves their own request, and an unanswered request is refused.
Outside content is data
Text from emails, tickets and web pages is labelled as untrusted data, not as instructions. Once an agent has read it, its tier 3 and 4 actions need a person by default for the rest of that session.
Pinned tools
You approve each tool from an MCP server before agents can use it. If its description changes, it's blocked until you approve it again.
Safe outbound calls
Addresses you add for servers, APIs and webhooks are checked before every call, so they can't be used to reach private networks.
Kill switches
Pause one agent, a whole company or your entire account at once. Spending caps stop work automatically when they're reached: a session at its own cap, and an agent or the whole account at its monthly cap.
Working with us
Found a vulnerability? Tell us.
We welcome reports from security researchers and won't take legal action over good-faith research that follows our responsible disclosure policy.
- Email [email protected] with the details. We acknowledge reports within three business days.
- Our contact details are also published at /.well-known/security.txt.
- Before general availability, an outside firm tests Everdeck with a focus on tenant isolation, approval bypasses and request forgery.
Security documents
The formal versions, in the legal centre.
- ReadSecurity overviewThe controls above, in full.
- ReadResponsible disclosureHow to report a vulnerability, and our promise to you.
- ReadSubprocessorsEvery service that handles your data, and where.
- ReadData Processing AgreementOur commitments as your processor.
Your company, always on deck.
Start a 14-day trial. Card first, nothing charged until day 14.