Security & data
What we store, where it lives, who can touch it, and what is not built yet. Last updated October 9, 2026.
The short version
- Nothing leaves without a person saying yes. Any action that sends, posts, books or changes a record waits in an approvals inbox. There is no "auto" mode.
- Operators start with no access. You connect a tool, then choose which operators may use it.
- You can stop everything with one button, and set a daily limit for each operator.
- Everything is logged — who or what did it, which model, who approved it — and you can download the log.
- Your data is yours. Export all of it as one file, or delete the workspace, any time.
Where your data lives
- Hosted on Railway, in their Amsterdam (EU West) region, on one server with a persistent disk.
- All traffic to and from Agentically uses HTTPS.
- Workspace data (operators, their instructions, conversations, memory, approvals, activity, locations, floor plan images) is stored on that disk.
Keys and secrets
- Connection tokens (Gmail, Follow Up Boss, Stripe and so on) are encrypted with AES-256-GCM before they are saved. The encryption key is kept in the server's environment, not on the disk with the data.
- Webhook signing secrets are encrypted the same way.
- API keys, team member keys, connector tokens and inbound webhook URLs are stored only as SHA-256 hashes. We show each one once and cannot show it again.
- API keys carry scopes (read, operate, approve, admin). Team member keys carry a role (admin, broker, agent, viewer).
- Card payments are handled by Stripe. Card numbers never reach our servers.
AI models and your data
- Operators run on Anthropic's Claude models through Anthropic's commercial API. Anthropic states that it does not use API inputs or outputs to train its models by default — see their commercial terms and privacy center.
- Agentically does not train any model on your data.
- What an operator sends to the model: its instructions, your shared business memory, the recent conversation, and the results of tools it is allowed to read.
- Text that arrives from outside (emails, CRM records, webhook events, phone callers) is passed to the model marked as data, not as instructions, and anything the operator then wants to send or change still needs approval.
Controls you hold
| Control | What it does |
|---|---|
| Approvals inbox | Every write action waits here. Approve or reject; a rejection note becomes a lesson for the operator. |
| Per-operator tool access | Choose which connections each operator can use, and set any operator to "reads only". |
| Pause switch | Stops chat, schedules, the API, inbound webhooks and phone calls at once. |
| Daily limit per operator | A cap on how many times each operator can run in a day. |
| Rate limits | 120 requests a minute per key; 120 outside-tool calls an hour per connection. |
| Activity log | Newest 2,000 actions, with actor, model and approver. Download as CSV or through the API. |
| Export | One JSON file with everything except secrets. |
| Delete | Deletes the workspace, its files and history, and cancels the subscription. |
Outside services we use
| Service | For | What it receives |
|---|---|---|
| Railway | Hosting | All workspace data (it is stored there) |
| Anthropic | AI model | Operator instructions, conversation, tool results |
| Stripe | Billing | Email, plan, payment details you enter at checkout |
| ElevenLabs | Voice (only when you use voice) | The text being spoken |
| Twilio | Phone line (only when switched on) | Caller number and what is said on the call, as text. Calls are not recorded as audio by Agentically. |
| Resend | Emailing your workspace key after purchase | Your email address and the key |
| OpenStreetMap | Map tiles and address lookup in Spaces | The address you look up; your browser loads map tiles from them |
| DiceBear | Operator avatar pictures | The operator's name, from your browser |
| unpkg | Loads the map library in Spaces | A normal web request from your browser |
| Tools you connect | Gmail, Drive, Calendar, GitHub, Stripe, Shopify, Meta Ads, Post Bridge, Follow Up Boss… | Only what the operators you allow read or (after approval) write |
Not built yet — so you are not surprised
- Single sign-on (Google / Microsoft / SAML). Today each person signs in with a personal key that carries their role.
- SOC 2 or other audits. We have none.
- A US data region. Data is in Amsterdam today.
- Scheduled backups. Not set up yet. Use Export for your own copy.
- Running on more than one server. There is one, so a restart means a short gap.
- The workspace owner key is stored so we can recognise it; it is not hashed like the other keys. Treat it like a password and give team members their own keys instead.
- Outgoing phone calls and text messages. Not built.
Report a problem
Email hello@getagentically.com. See also our Privacy Policy, Terms and the API docs.
Agentically is a product of HPM3 LLC.