Security

Your company stays yours.

The rules that matter are built into the system, not left to the AI. Here is how one request travels — and where it stops.

Follow one request · click a step

You ask

You sign in to demiros. Every request carries who you are and what you are allowed to do.

  • Each organisation is walled off from every other inside the database
  • Roles decide who can build, use and approve

The agent plans

One agent reads, works and checks. The rules around it — what it may touch, what must wait — are enforced by the system, not by the AI.

  • Rules run outside the AI model
  • Every step is written to the record

A sealed workspace

Code, files and browsing happen in a locked-down workspace created for this task. There are no passwords or keys inside it.

  • One workspace per task
  • Outbound traffic goes through a gatekeeper
  • Nothing in it can read your credentials

Your tools

demiros reads and acts through each app’s own sign-in. The access each app grants is held by our connections provider; we never see your password.

  • Your data stays in your apps
  • Admins can restrict which apps may be used

You decide what leaves

Anything that would send, post, save or push stops on a card that shows exactly what will happen. What you approve is what lands — the card is built from the exact thing that will be sent. An agent’s Owner can let it send on its own; that is off by default and every send is logged.

  • A named approver, logged
  • Reject applies nothing, and a rejected card can’t be approved later
  • Admins can switch “send on its own” off for everyone

Every step on the record

What ran, when, with which tool, who approved and what it cost — for every run in your organisation.

  • Admins can export the audit log
  • Kept as long as your account exists

Built in, for every organisation.

Your organisation is walled off

Every organisation is separated from every other inside the database itself, and the platform refuses to start in any mode that could see past that wall.

What you approve is what lands

Every outside action waits for a person’s yes unless its Owner lets that agent send on its own. The preview is built from exactly what will be sent.

A sealed workspace per task

No passwords or keys inside. Outbound traffic goes through a gatekeeper.

Your tool accounts stay yours

Each tool connects through its own sign-in. demiros never sees your password.

Your own AI account, if you want

Use your own account with an AI provider. It is stored encrypted, only the last four characters are ever shown, and we don’t charge for that use.

Every step on the record

What ran, when, with which tool, who approved it and what it cost.

Leave any time

Ask, and we delete your organisation and everything in it after a 30-day grace period.

How long we keep it

Account, agents, runs and results
As long as your account exists, and 30 days after you ask us to delete it
Technical logs
30 days
Contact form messages
Until you ask us to delete them
Ledger and billing records
As long as the law requires

The full list is in our privacy policy.

For your IT team

Questions your IT team will ask.

Does the AI model provider train on our data?
No. demiros uses Claude through Anthropic’s commercial API, and under Anthropic’s commercial terms your data isn’t used to train their models. If you add your own provider account, that provider’s terms apply.
Where is our data stored?
On Google Cloud in Mumbai, India (asia-south1). Your business records stay in your own apps — we keep your agents, runs and results, not a copy of your business.
Do you have SOC 2 or ISO 27001?
Not yet. demiros is a young, founder-run company. Send us your security questionnaire and we’ll answer it in writing, plainly — including what we don’t have yet.
Can an agent send something without anyone approving it?
Only if someone chose that. By default every email, post, file change or code push waits for a named person’s yes, and a run with no one watching stops at the card. An agent’s Owner can let it send on its own — it’s off until they turn it on, every send is logged with the agent and its Owner, and Admins can switch the option off for the whole company.
Who at demiros can see our data?
Only the founder can reach production systems, and only to keep the service running or when you ask for help.
Which other companies process our data?
Google Cloud (hosting), Anthropic (AI models), Composio (holds your app connections), Supabase (sign-in) and Resend (email). Nothing is sold or shared beyond them.
Special requests

Need something specific? Just ask.

Every request is read and answered by the founder. We’ll tell you plainly what we can do today, what’s coming, and what we won’t do.

Talk to us
Your security questionnaire
Answered in writing.
A data agreement (DPA)
Ask and we’ll work through it with you.
Invoices for your finance team
On request.
Company sign-in (SSO) or custom data retention
Tell us what you need — we’ll say honestly if and when.
Anything else
Write to platform@demiros.ai.