Security and trust
An agent that writes to your prospects should be the most constrained software you run. Here is exactly what it can and cannot do.
Before anything is sent
Approving a launch is a decision you make once per campaign. The other gates apply to every send.
Approving Day 1 always needs a person. Until you approve it, nothing is sent.
20 sends per mailbox per day, so your daily quota is 20 times the mailboxes you connect. LinkedIn invites stay within platform limits.
Dedupe, bounce and opt-out guards, plus a spend gate that caps paid sourcing and credit use by plan.
A reply, a bounce or an opt-out stops the sequence on every channel. A LinkedIn accept stops the cold email.
Fit scores, channel choices and exclusions show the inputs behind them, so you can see why a prospect was picked or left out.
Sender safety
Access and secrets
Your agent connects with an API key or an OAuth grant. Neither is stored in readable form, and both can be cut off from one page.
Create a key in Settings → API & MCP. It is displayed once, stored hashed and revocable at any time. Each key carries the scopes you grant: read, draft, campaign or approve.
Authorization: Bearer ofk_… Limit: 120 requests per minuteExample header. Not a real key.
Clients sign in from the server URL alone. The account owner approves consent on our page. Access tokens last 24 hours. Refresh tokens last 180 days and rotate. Both are stored hashed.
Gmail API, Zoho Mail API and custom SMTP and IMAP credentials are encrypted at rest.
Open Settings → API & MCP and press Disconnect. That agent loses access instantly. API keys are revoked from the same page.
Human in the loop
Copilot keeps you approving every send. Autopilot runs the sending inside the guardrails. Launch approval is required in both.
Stop it at any point
Ask your agent to pause it. resume_campaign restarts it when you are ready.
Pause a background agent that watches for buying signals. list_agents shows what is running.
In Settings → API & MCP, press Disconnect. The agent loses access instantly.
Where we are
Responsible disclosure
Send the details to techdevsinc@gmail.com with the subject line Security report.
Email a security reportWhat to include
Please test only with your own accounts. Do not access other customers' campaigns or prospects.
Questions
Not on Day 1. Launching a campaign, which means approving Day 1, always needs a person. In Copilot you approve what goes out. In Autopilot the agent writes and sends inside the guardrails after you have launched. There is no send tool, so messages only go out through campaigns you approved.
Any reply stops the sequence on every channel. Replies are classified as interested, question, out of office, not now or bounce. Hard bounces stop the sequence and are never retried. A bounce notice is counted as a bounce, never as a reply.
It could still happen. We keep LinkedIn invites within platform limits and pace them, and a LinkedIn accept stops the cold email. No outbound tool can promise zero risk, and we will not claim ours does. Start with a small campaign, read the schedule before you approve Day 1, and pause if something looks wrong.
Email provider credentials for Gmail API, Zoho Mail API and custom SMTP and IMAP are encrypted at rest. API keys and OAuth tokens are stored hashed, so they cannot be read back from storage.
Only your account. We also have superadmin support access, which our team uses for operations.
Yes, at any time. Open Settings → API & MCP and press Disconnect. The agent loses access instantly. API keys can be revoked from the same page.
No. We have not completed a SOC 2 audit. We are in private beta and hosted on AWS. If your procurement needs a security questionnaire, email techdevsinc@gmail.com and we will answer it in writing.