Security

A Digital Employee handles real business documents. That means security is not a feature — it is the job. This page describes the controls we operate today. It is not a certification.

Access

• Every human on the team signs in with SSO and a second factor.
• Production access is granted per task, logged, and time-boxed.
• Workspace users get role-based permissions and per-employee scopes.

Encryption

• All traffic runs over TLS 1.2+.
• Data at rest is encrypted on managed EU infrastructure.
• Secrets and third-party credentials are held in a managed vault.

Isolation

Each customer's workspace is logically isolated. A Digital Employee only touches the mailboxes, files and connections you explicitly grant.

Audit

Every action a Digital Employee takes — a file read, a document produced, a message sent — is written to an append-only audit log you can inspect. If she cannot confidently complete a task, she flags it for review instead of guessing.

Backups & recovery

Databases are backed up daily with point-in-time recovery. Backups are encrypted and retained for 30 days.

Reporting a vulnerability

If you believe you have found a security issue, please write to security@sellertoys.com. Do not disclose publicly until we have had a reasonable chance to respond.