Security and privacy
How we protect your work
Giving AI workers real work means giving them access to real information: customers, invoices, contracts. Before you do, you should know where that information lives, who can see it and who decides what a worker can do.
Your data
Where your information is stored and processed decides which laws protect it and who could access it.
Hosted in the European Union
Cuadrilla runs on infrastructure in the EU. Your conversations, files and workers’ memory are stored there.
Zero data retention with AI providers
Workers use AI models under zero-data-retention terms: the provider processes each request to produce an answer and doesn’t store it afterwards.
Credentials nobody can read
Passwords and keys go into a vault, per person or for the company. Workers can use them for the site they were saved for, but nobody sees the value: not in the list of credentials, not the worker, not the logs.
Permissions and access
A worker that can act in your tools needs clear limits, set by people.
Access you choose
You decide which apps and accounts each worker can use, and which conversations it joins. Nothing is connected unless someone connects it.
Permissions per action
Reading and preparing don’t need permission. Sending, creating or changing something outside Cuadrilla does: the worker shows a card with what it will do, for whom and with what content, and waits. Some specific actions can be pre-approved, but never deleting, and paying is always done by a person.
What’s between you two stays between you two
With a shared worker, each person has their own conversation and nobody reads anyone else’s. Like a colleague, the worker keeps one memory for the team, but anything you ask it to keep between the two of you, it won’t tell anyone.
Your company’s governance
Workers are part of your organization and follow its structure: who’s in charge, who they work with and who approves.
The work stays with the company
Shared workers belong to the workspace. When someone leaves, their shared workers can be handed to someone else, so the work doesn’t leave with them.
Someone in charge of every worker
The person in charge decides who the worker works with, receives its alerts and approvals, and can remove it. If a shared worker’s question goes unanswered, it moves up your org chart.
Visible and traceable
You can see each worker’s routines, what it’s handling and who asked for what, and changes to credentials and their use are recorded.