Security and privacy
Agents that can act need real safeguards. Here’s how they work.
Every agent gets only the access it needs. Every action leaves a receipt, so it can always be traced back. It’s built into everything, and none of it can be switched off.
SableWrites to customers · Revenue ops
ReceiptWhenFriday · 10:07 · on HAV-224
WhyDana asked for seven days’ notice before repricing.
What changedNotice sent to 148 accounts. Three flagged on the card for a person to check.
Approved byDana Whitfield, 10:07
Written by SableKept for two years, can’t be edited
01Access
Only the access it needsEach team gets one of five levels on each account: No access, Can read, Can edit, Can act with your OK, or Can act on its own, and any agent can have its own setting on top. An agent that only needs to look never gets the ability to change anything.
Nothing connected by defaultA new workspace can’t reach anything until you connect it. Disconnect an account and the agents stop right where they are, with nothing lost.
02The record
Every action leaves a receiptEach receipt records who did it, when, why, what changed and who approved it. Receipts are kept for two years, and nobody can edit them, Havby included.
Every action traces back to its agentEvery receipt names the agent that did the work. Any receipt can be traced to the agent, the card and the minute, and nobody can quietly rewrite it.
03Your data
Your work is not training dataNothing in your workspace is used to train or fine-tune a model, Havby’s or a provider’s. Every model request is sent with provider data collection denied, so providers may not store it for training.Read the full policy
Your data, kept apart and encryptedEvery workspace’s data is kept separate from every other, down to the row. It’s encrypted with TLS 1.2 or newer on the way to Havby and AES-256 once stored. Passwords you give an agent for signing in to websites are protected by a Cloud KMS key that belongs to your company alone. Other credentials you connect are encrypted under a shared platform key, and the rest of your data uses Google Cloud’s managed encryption for Cloud SQL and Cloud Storage.
Connected accounts
Composio handles the connection. You decide who uses it.
Composio takes care of signing in to Google and GitHub and carries out each request an agent makes. Before anything goes, Havby checks it against the level you set, holds anything that needs a person and writes the receipt.
See every integrationYour accounts stay yoursEvery connected account is tagged with the company that connected it. Havby checks that tag before each request and again on the response, so another company’s agents can never reach your accounts.
Disconnecting really disconnectsWhen you disconnect, Havby asks Google or GitHub to revoke the access itself, not only Havby’s record of it. If the provider doesn’t respond, Havby keeps trying until it does.
Composio keeps none of your contentComposio runs under zero data retention for Havby. It stores nothing your agents send or receive, only the time, the tool used and whether it worked.
SOC 2 Type II and ISO 27001Composio is independently audited for both, and Havby reviewed its security record before connecting a single customer account.
Pause everything in one stepYour workspace owner can pause every integration at once. Agents stop reaching your accounts until you turn them back on, and nothing is disconnected in the meantime.
How much agents do on their own
Choose a level for every account. Change it in one click.
Can edit
Drafts, then waits.The agent drafts and edits, but nothing goes out and nothing is deleted. A good place to start a new account, or for anything that touches a customer.What you seeI found three invoices more than thirty days overdue: Halden, Marrow and Oaks. I’ve drafted a friendly reminder for each, with the invoice attached, and left them on the card for you.
Can act with your OK
Does the work, then waits for your OK.The agent also sends, pays, shares and deletes, after you OK each one. Read it, then OK it or send it back with a note.What you seeI’ve drafted three reminders, one per invoice, and attached them to the card. Halden’s mentions the payment plan you agreed in June. Say the word and they’ll go out.
Can act on its own
Gets on with it.The agent does the work and sends you a receipt. Nobody checks anything before it goes out.What you seeChased three overdue invoices. Two were paid before nine. Halden asked for a call, so I booked fifteen minutes on your Thursday and let them know what it’s about.
Anything that can’t be undone, like sending money, deleting an account or signing something, comes to you first for your OK, with the reasoning attached, unless the account is set to Can act on its own.
01What Havby keepsThe accounts you connect, the cards on your board and the receipts of what your agents did. That’s what the product needs to work.
02What Havby never doesSell your data, share it with advertisers or use it to train a model. Nobody at Havby has standing access to your workspace. If someone needs to look in, for a support ticket or a security question, that access is temporary, logged and closes again on its own.
03How long it’s keptReceipts are kept for two years, then deleted. If you delete a workspace, it stops working right away, and its data is permanently erased 45 days later.
Found a security issue? Please tell us first.security@havby.com · first reply within 72 hours · safe harbour for good-faith research
Report a vulnerability