Security & trust

The safe gateway for AI in your business.

Riley sits between AI and your accounts as one controlled door: least privilege, scoped access, approval before any write, revocable connections, and a full audit trail. No raw secrets ever reach a model, and every week ends in a signed receipt. Here is exactly how, in plain language.

Get Early Access
How Riley is built

Five controls that keep AI on a leash

No vague reassurance. Five controls that ship today.

Approval before any write

Riley drafts the reply, the fix, the post, the message, then waits. Anything that publishes, sends, or spends sits in approval until you tap approve, whether the request came from the dashboard, Slack, or a connected AI client. You decide what goes out, every time.

Least privilege and scoped access

Every connection is scoped to exactly what Riley needs and nothing more. You choose what each integration can touch, and you can revoke any of it in one click. Access is granted deliberately, not assumed.

No raw secrets reach the model

Riley connects through each tool's own secure sign-in and never sees, types, or stores a password. Keys and tokens stay in the gateway, not in a prompt, so no model or connected AI client is ever handed a raw secret.

Your data and memory stay yours

What Riley reads and what it remembers, your voice, your accounts, your past work, lives in your workspace alone. Never pooled with anyone else, never used to answer another account's questions. You can read and edit the memory any time.

An audit trail and a receipt anyone can verify

Every action Riley takes is logged, and each weekly proof receipt is cryptographically signed. It carries a signature ID anyone can check on a public verify page, backed by published keys. Proof of what your AI did, not a screenshot taken on faith.

Proof receipt Week of Jun 22
Reply posted to 3 new Google reviews
drafted by Riley, approved by you, confirmed live
Updated business hours on the client listing
change verified against the connected profile
Signed & verifiable. Check this receipt at /verify
sig: 3f9a…b71c
Signed proof

Proof of what your AI actually did

Each receipt is signed the moment it is created, then checked against keys we publish openly. A client, a boss, or an auditor opens the link and confirms the work is real and unedited, without taking your word for it. That is the difference between a screenshot and evidence.

How your data is handled

Plain rules, applied the same way every time.

  • You connect each tool, scope what it can touch, and disconnect it whenever you want.
  • Your data does your work and nothing more. It is never reused for anyone else.
  • Your history and memory stay inside your workspace, walled off from every other account.
  • Every action is logged, and any external write waits for your approval before it runs.
Where we are honest

What is live today, and what is in progress

The same honesty Riley shows your clients, it shows you. The controls above work today. Formal certifications take time, and we will not claim a badge we have not earned. Here is the real status.

Approval before any external writeLive
Scoped, revocable connectionsLive
Workspace-private data and memoryLive
Signed, verifiable proof receiptsLive
Formal security certificationIn progress
Data processing agreement for agenciesIn progress

A safe gateway for the AI in your business.

Your approval on everything that ships, scoped and revocable access, your data and memory kept private, and a signed receipt anyone can verify. Get early access and see the proof.