Book a call
Menu
Security & privacy

Security: who can open what in your workspace.

Every person, minion and app gets its own key, and most doors stay shut. Pick a guest to see which doors open for them, then read the house rules.

Book a call See who can open what

Names on this page belong to a sample business, Sample Heating Co.

The guest list

Who can open what.

Pick a guest. Doors swing open, open a crack, or stay locked. It's checked on the server every time, not just hidden on the screen.

Dana, the owner holds the most keys, and still can't read anyone else's private chats.

    The whole guest list, as a table
    GuestShared knowledgePrivate chats and notesSay yes to an email, text or postSay yes to spendingPut a price or deal liveExport everythingThe audit log
    Dana · owner All of it. Only her own. Nobody reads someone else's, owners included. Yes, whatever the rule asks for. Only an owner can. Her call. Owner only, and it leaves out other people's private items. Owner only.
    Marcus · admin All of it. Only his own. Yes, unless a rule says only an owner. Spending needs an owner. Yes. Owner only. Owner only.
    Jess · member The company's and her own team's. Only her own. Only what your rules let members approve. Spending needs an owner. She can suggest it. An owner or admin accepts. Owner only. Owner only.
    Support · Digital Minions What an admin sees, including leads' contact details. Never private chats, private requests or private notes. Never says yes to a send. Spending needs an owner. A price, discount or deal is your business's call, not ours. Can't export. Can't read it.
    Otto · a minion What his team may see. Only inside the chat he's working in, never repeated outside it. He asks. A person says yes. He asks. An owner says yes. Never writes one in without a person's yes. No. No.
    AI provider Only what's in each request it processes. Only what's in each request it processes. No. No. No. No. No.

    Our AI providers each say in their terms that they don't train their models on what we send through their paid services, and each works under its own terms. The subprocessors page lists every one. Which providers handle what.

    House rules

    The house rules: how your data is kept.

    • Your own building

      One business, one database

      Each business gets its own deployment and its own database. It's never pooled with other businesses.

    • Keys in the safe

      Passwords stay encrypted

      Sign-ins and keys for the apps you connect are stored encrypted with a master key, and never shown or logged again.

    • Nothing leaves without a yes

      Ask first, every time

      Emailing a customer, publishing or spending waits for a person with the right role. That check happens on the server, not just on the button.

    • Strangers' words

      Outside words stay suggestions

      Web pages, emails and what callers say are outside content. They can only ever become a suggestion for a person to review, never a rule.

    • Forget means forget

      Gone, and staying gone

      Forget a customer in Digital Minions and their calls, texts, notes and record are deleted there, and their name and number are scrubbed everywhere else in the app. Restoring a backup or an import can't bring them back. Digital Minions also asks our phone carrier and Slack to delete their copies. Only their opt-out stays, so nobody contacts them again.

    • Rewind

      Dated checkpoints of the Minion Mind

      A checkpoint of what the team knows, every day and before every risky change. Compare any two, and restore one part after a preview.

    • Written down

      A tamper-evident audit log

      Roles, approvals, rule changes and more, each entry chained to the one before, so a changed or missing entry shows. Only an owner can read it.

    • We break in on purpose

      A saved attack suite

      A saved suite of attack tests boots the real app and tries to get in: reused sign-in links, snooping on a colleague, forged forms, web pages that try to give orders. Every attack has to be refused, and the suite grows with every fix.

    The vault

    Backups locked to your key.

    A snapshot every night, kept 30 days. Once your client vault is set up, every backup and export is locked to your business's own key, and your Emergency Kit opens them, even on your own computer.

    • Backups

      Locked to your key

      Once the vault is set up, every backup and export is encrypted to your business's own key instead of being kept as a plain file.

    • Emergency Kit

      One recovery key, yours

      The owner gets one Emergency Kit: a recovery key to keep somewhere safe. It opens any backup, even on your own computer.

    • Access log

      Who came in from outside

      A tamper-evident log shows the owner every time anyone outside your team touched the workspace.

    • Sign-in

      No kit needed to sign in

      Day-to-day sign-in never depends on the kit: passkeys, Google or Microsoft, or an email link.

    In case of emergency
    break glass

    Lose the kit and we can help: we keep a sealed emergency copy. Using it the normal way goes like this, all logged.

    1. 1
      You askIt starts with your request.
    2. 2
      Everyone's toldEvery owner and admin hears about it straight away.
    3. 3
      4 hours to cancelThen a 4-hour wait you can cancel with one tap, with every step in the access log.

    We're upfront that we could open it. That's why every normal use is announced and logged.

    Questions

    Straight answers.

    Can Digital Minions staff read my private chats?

    Our support login sees what an admin sees, and never private chats, private requests or private notes. It can't export or read the audit log, and an owner can remove it from People any time.

    Are we backed up?

    The app backs itself up every day, checks each copy and keeps 30 days of them. Before a risky change to the Minion Mind, it saves a checkpoint first.

    What happens to our data if we leave?

    The owner gets an export to keep. Then we delete your database, its backups and any off-site copies, and finish with a receipt of what was deleted.

    Which outside companies handle our data?

    The companies we use to run the app, from AI providers to hosting, backups and the phone line, each listed with what it does. See the subprocessors list.

    Does the AI learn from our data?

    Your team learns: rules and facts from your own corrections, each one waiting for your yes. Our AI providers process each request under their own terms, and each says it doesn't train its models on what we send through its paid service.

    Let's talk

    Hand your first job to a minion.

    Tell us about your business, your goals and what you'd hand off first. We'll show you the team that would take the most off your plate.

    Book a call See them work

    Or request access to the live demo (sample data).