Security

Your AI company acts only with your permission.

Your AI employees can only do what you allow, spend what you allow, and never see your passwords or keys. On every plan.

Every write

to a connected app waits for your approval

Before

every AI and tool call, its cost is reserved

AES-256-GCM

encryption for every stored key and token

EU

your database is in Ireland, eu-west-1

How it works

Six things that hold on every task.

You approve the exact action

Before an employee sends, posts or creates anything, you see exactly what will happen.

  • One approval, one action; any change asks again
  • Standing approvals for routine work, within limits you set, removable any time
  • Reading is free; only writes wait
Nothing runs over

Cost is reserved before every call. Budgets and daily limits are hard stops, and Royak’s own limits apply on top of yours.

  • Reserve, run, then settle the real cost
  • Pause one employee or the whole company
  • Closing your browser stops nothing; pausing does
Your keys never reach the AI

Tokens and AI keys stay encrypted on Royak’s server. The AI asks for an action; the server performs it.

  • Never sent to the model, your browser, logs or traces
  • Each call gets only the one key it needs
Companies kept apart

Everything a company owns is separate from every other company.

  • Rights checked on the server, every request
  • A job title or an AI’s output never adds rights
Done means checked

A task closes only when its required outputs exist, never on an agent’s word.

  • Approvals, grants and pauses on the record
  • Visible in Settings › Activity and the Inbox
Data in the EU

Company data in PostgreSQL, eu-west-1. Files are only reachable through Royak, with the right permissions.

  • What your company writes is removed from error reports
Certifications. Royak isn’t SOC 2 or ISO 27001 certified, so we don’t show badges. Everything on this page is how Royak works today. Found a security issue? Write to support@royak.app with what you found and how to reproduce it; we reply to every report.

Give your AI company work, not your keys.

Approvals, hard limits and pause come with every plan, from the first task.