Security
Built so an agent can only do what its person can.
The agent has no permissions of its own. It borrows yours, for one request at a time, and asks before it acts.
What we do
The workspace owns the work
On a personal account, conversations, memory, skills, and files are yours. On a company account, they belong to the company. Remove a member and their seat closes; the company keeps what it paid for.
Row-level security everywhere
Every table in the control plane is protected by row-level security keyed on the company and the person. The API never talks to the database with a caller's rights it did not verify first.
Short-lived tokens
The service mints a five-minute token per request after verifying your session. Browsers never hold a database credential.
Confirm before consequence
Sends, writes, purchases, and external actions pause for a confirmation. Background runs hold their confirmations for you to approve later.
Encrypted vault
Website logins used by computers are encrypted with a key that never leaves the service. Agents use a login without reading it.
Isolated computers
Your agent's Cloud Computer, on Plus and Premium, is a separate, secure computer in the cloud with its own disk. It can't see or touch anything on your device. Starter and Basic do not include it. KeelDock tasks on Premium run in their own workspace. Idle machines suspend, then stop. Nothing is shared between workspaces.
Optional two-factor
A personal account can require a second factor to sign in. A company can require it for everyone. Sign in with email, magic link, Google, or Microsoft.
Audit and export
Tool calls and usage are logged with who, when, and what. Export any month as CSV.
Where things run
The Agents API, Cloud Computers, and KeelDock workspaces run on Fly.io in the United States. Workspace data lives in a dedicated Supabase Postgres project in the same region. Payments are processed by Stripe; we never store card numbers. Model requests, including Kojiin, go to the vendor you chose, through OpenRouter or directly, and are not used to train models.
Questions, disclosures, or a security report: security@keelagents.ai.
Start on your own, or with your team.
Fourteen days free. No card. Personal and company accounts use the same plans.