Built on infrastructure large companies trust.
Aptic runs on one of the world’s largest cloud platforms, in data centers with round-the-clock physical security and independent security certifications.
Security and privacy
Your business, in safe hands.
Aptic works inside your accounts, so protecting them is part of every step: how your credentials are kept, who can see your data, and where it goes.
Infrastructure
-
Encrypted in transit
Every connection to Aptic uses HTTPS, and sign-in cookies are marked secure.
-
Every action on record
Each approval and change is logged: who approved it, why, and what it changed.
Credentials
Your credentials, locked away.
Every password, key, and sign-in you connect is encrypted with its own key. Each of those keys is sealed by a master key that stays inside a dedicated key service and never leaves it.
Even a full copy of our database, with our own application secrets, cannot decrypt anything unless that service allows it, and every unlock is recorded in an audit log.
No one sees your credentials in plain text, not our staff and not our AI agents.
-
A second lock on sign-ins
Browser sign-ins get a second layer of encryption on top of the first.
-
Never in an agent’s hands
Aptic’s AI agents only know whether a connection is in place. They never hold the credential itself.
-
Used once, then destroyed
Work in your software runs in a short-lived, isolated container. The credential exists only in its memory, for that one job, and is destroyed with it.
Your data
Your data stays yours.
Kept apart from every other business, kept to a minimum, and sent only where you send it.
-
Walled off from other businesses
Each business’s data is kept separate in the database itself. A request that does not say which business it belongs to gets nothing back.
-
AI models keep nothing
The AI models we use process your data only to produce an answer, under zero-data-retention agreements. Nothing is stored once the answer comes back.
-
Never used for training
Your data is never used to train AI models. Our monitoring records only that a task ran, never what it contained.
-
Personal details kept out
Emails, phone numbers, and card numbers are removed from uploaded text and from what Aptic remembers. Delete a remembered item, and every copy of it goes too.
-
Only where you send it
Sharing a file outside your business takes an action from you. Share links go to a named recipient, and they expire.
-
Only the access it needs
Every connection asks for the least access the work needs, and read-only where that is enough: Aptic reads your Google Drive and never writes to it.
Questions about security?
Apply for the pilot, and a consultant will walk you through how Aptic would work with your accounts.