The model never sees your keys
The credentials we hold, such as Slack tokens, API keys, access to your own AI plan and saved website passwords, are encrypted at rest (AES-256-GCM). Apps connected through Composio keep their tokens at Composio. None of these reach the model or the run log, and no app token or API key is put in the sandbox. A saved website password is the exception: it is written into the sandbox for the moment it is typed into the page, and code running there at that moment could read it.
Your team's first AI employee. Starting today.
Free to start, no card. Connect the messenger your team already uses, hand over one job, and the finished work comes back the same day.