# Secure by design. Built for trust.

Crevio runs a real business on your behalf — taking payments, sending messages, acting in your name. Here is how we keep that power safe.

[Contact our security team](mailto:support@crevio.co)[View subprocessors](/legal/subprocessors)

Protection statusLive

- Encryption in transit & at restActive
- Training on your dataNever
- Tenant isolationEnforced
- PaymentsPCI Level 1

How we protect you

## Power, with guardrails on every side.

### You hold the controls

Decide how much your agent can do on its own. Require human approval for sensitive moves — publishing, spending, sending — and review every draft before it goes live.

Agent autonomyLive

- Spend ad budgetAsk first
- Draft a product pageAuto

### Never trained on your data

Your business data, prompts, and agent memory are never used to train foundational models. What you build on Crevio stays yours.

### Encrypted secrets & connections

API keys and OAuth tokens for the apps you connect are encrypted at rest and scoped to the workflows that need them — never shown in plaintext.

StripeMetaGoogleSlack

### Isolated by tenant

Every workspace, its agent context, and its customers are logically separated. Strict boundaries keep your data inaccessible to any other account.

### Sandboxed execution

When your agent runs code to build and operate your business, it does so inside isolated sandboxes — walled off from other tenants and our core systems.

### Role-based access

Choose who on your team can view, edit, or approve work. Member roles enforce least-privilege access across the whole workspace.

### Compliant infrastructure

Hosted with established cloud providers that meet industry security and privacy standards, with encryption in transit and at rest.

[View our subprocessors](/legal/subprocessors)

## Frequently asked questions

Need something more specific? We're here to [help you out](mailto:support@crevio.co).

### Is my data used to train AI models?

### How are my connected accounts and API keys secured?

### Can my agent take actions without my permission?

### Is Crevio multi-tenant, and how is customer data isolated?

### How are payments handled?

### Who are your subprocessors?

Canonical URL: https://crevio.co/security