Security & trust

Secure by design.

Agents that act on real accounts need real guardrails. Here is exactly how the platform keeps you in charge — and where the paperwork lives.

EU-built & hostedGDPR-firstAI Act transparencyAES-256-GCMAudit-logged
01The stance

Three commitments, structural.

01

EU-built & EU-hosted

Alethe s.r.o. is a Czech company and the platform runs on EU infrastructure. Your contract, your data and your disputes all live under EU law — no transatlantic guesswork.

02

GDPR-first

AI processing runs under EU-approved safeguards — Data Privacy Framework plus Standard Contractual Clauses — with zero data retention at the model providers. EU-region data residency is available on request.

03

You own everything we build

On bespoke builds the running system is yours: your cloud, your accounts, your provider keys — handed off with documentation, training and full access. No lock-in to us.

02Controls

Autonomous by default. Accountable by design.

The EU AI Act asks for human oversight of AI systems. On Alethe that isn't a policy document — it's product features.

An agent action

01Approval gates
02Live run traces
03Budget caps
04Scoped tools & models
05Encrypted credentials
06Tenant isolation & audit

Your data

Approval gates

Outbound actions — replies, publishes, purchase orders — can be held for a human decision. When a gate is set, nothing sends without you.

Live run traces

Every agent run is visible step by step: which tool ran, with what result, in what order. No black box between the instruction and the outcome.

Budget caps

Per-execution credit caps mean a runaway automation can never drain your balance — it stops at the ceiling you set.

Scoped tools & models

Each agent gets exactly the tools and the model its job needs, nothing more. Capability is assigned, not assumed.

Encrypted credentials

Connected-account credentials are encrypted at rest with AES-256-GCM. Your accounts stay your accounts.

Tenant isolation & audit

Organizations are isolated at the database layer, and agent actions are audit-logged — who did what, when, on whose behalf.

“Control isn't an enterprise tier. It's the default.
03Paperwork

The compliance trail, in public.

Nothing to request, nothing behind a sales call — the documents are live on this site.

GDPR

The processing details, subprocessor list and your rights are public — privacy policy and subprocessors.

EU AI Act

Every agent surface tells users they are talking to an AI, in line with the transparency rules (Art. 50) — documented in the AI transparency notice.

Data deletion

A documented, self-serve deletion path for your data and connected accounts — data deletion.

Security questions before an engagement? Ask us directly — we answer within one working day.

Early access

Run the platform yourself.

Self-serve is invite-only while we polish it. Leave a work email and you're first through the door.

Invite-only until autumn 2026 · we onboard from the list in waves

By joining, you agree to our Privacy Policy.

300+ tools76 Shopify tools50+ Meta tools600+ media models
Bespoke build

Have us build it for you.

We start with a call about the process. What is feasible — and what it costs — comes back after we have analyzed the real data.

Book a bespoke build

Zero obligation · we reply within one working day

EU-built & EU-hosted
GDPR-first
You own everything we build