Security & control

You decide how far they go.

Kuvai is built so the useful part — teammates doing real work — never requires handing over the keys.

Reply to Brightline Supply — Invoice #4471

Amount matches PO-2291 ($4,200), due Thursday. One line item is billed twice — I drafted a note asking for a corrected invoice.

What should I do?Send the note as draftedEdit it firstHold — I’ll check

Send response

Control over actions

You decide how far it goes: ask for drafts and you get drafts; ask it to act and it acts. Email from web chat is drafted for you to send.
Work a teammate starts on its own — scheduled runs, follow-ups — is checked in code against its autonomy level: additive in-lane work runs, destructive changes are proposed to you, and out-of-lane actions never run on their own. Every decision is logged.
Evidence-gathering runs are read-only, exact duplicate writes are refused, and runaway loops are stopped.
Pause work, Guardrails and Retire on every teammate. Stop cancels a running task.

Tools by consent

You sign in to each tool through its own OAuth screen; Kuvai never sees your password.
A teammate can use a tool only after you connect it and assign it to that teammate.
Disconnect a tool any time and teammates lose access to it.

Email by design

Mia has its own Kuvai address and no login to your inbox.
Mail is processed only from addresses you connect — your sign-in email plus up to 4 more, 5 in total.
Connecting Gmail to a teammate is a separate, explicit grant.

Platform security

Every app request is authenticated at the edge; identity is set from your session, never taken from the caller.
Strict Content-Security-Policy, HSTS, and clickjacking protection on the web app.
HTML is sanitized before it renders; sensitive routes are rate-limited.
Outbound fetches, such as reading your website for Company Context, are guarded against reaching internal networks.
Logs pseudonymize user identifiers and redact credential-shaped values.
Payments are handled by Stripe; Kuvai never stores card data.

Sign-in

On the web, sign in with Google, Microsoft or a one-time email code.
Enterprise SSO is available on request.
The iPhone and Mac apps add Sign in with Apple and keep your session in the device Keychain — with no ads and no cross-app tracking.

Your data

Uploaded files are indexed for your account only, and search is filtered to your files before it runs.
Teammates read the files you attach to a message; your uploads stay in your account.
Teammates run on leading models from providers such as OpenAI, Anthropic and Google, under their business terms.
You can download your files any time. Account deletion is available on request and completed within 30 days.

Have a questionnaire or a specific question? Contact us and we’ll answer directly.

Questions, answered

Can a Kuvai teammate send email or change records without asking?

It does what you ask: ask for a draft and you get a draft; ask it to update a record and it does. Email from web chat is drafted for you to send. Work it starts on its own is checked against its autonomy level — at the default, additive in-lane work like a scheduled summary runs, destructive changes are proposed to you first, and out-of-lane actions never run on their own.

Does Kuvai read my inbox?

Mia, the Personal Assistant, works from mail you forward to its own Kuvai address, from the addresses you’ve connected — your sign-in email plus up to 4 more. Reading your Gmail requires a separate connection that you approve.

Who can see my files?

Uploads are indexed for your account only. Team plans have an owner and members; teammates and projects are per user.

Where is my data stored?

Files are stored on AWS and processed by the model providers Kuvai uses under their business terms. For a specific data-location or processing question, contact us and we’ll answer directly.

Can my security team ask detailed questions?

Yes — contact us and we’ll answer directly.

Your team is one teammate away.

Describe the job. Kuvai builds the teammate. You decide how far it goes.