Digital Minions · Security brief
Security: who can open what in your workspace.
One page on how Digital Minions keeps your business's data in your business. The full story is at https://digitalminions.co/security.
- 01
One business, one database
Each business gets its own deployment and its own database. It's never pooled with other businesses.
- 02
Nothing goes out without a yes
Emailing a customer, publishing or spending waits for a person with the right role, checked on the server every time.
- 03
Roles
Owners, admins and members. Our support login can read what an admin reads, never private chats, requests or notes. Support looks and helps, never approves, sends or connects anything. They set only Digital Minions' own prices and safe defaults; an owner can remove their access.
- 04
Secrets stay encrypted
Sign-ins and keys for the apps you connect are stored encrypted with a master key, and never shown or logged again.
- 05
Forget means forget
Forget a customer in Digital Minions and their calls, texts, notes and record are deleted there, and their name and number are scrubbed everywhere else in the app. A backup restore or an import can't bring them back.
- 06
Rewind the Minion Mind
A checkpoint of what the team knows every day and before every risky change. Compare any two, and restore one part after a preview.
- 07
A tamper-evident audit log
Roles, approvals, rule changes and more, each entry chained to the one before, so a changed or missing entry shows. Only an owner can read it.
- 08
Attack-tested
A saved suite of attack tests boots the real app and tries to get in: reused sign-in links, snooping on a colleague, forged forms, web pages that try to give orders. Every attack has to be refused.
AI providers and your data
Each request goes to the AI provider you picked, which processes it. Our AI providers each say in their terms that they don't train their models on what we send through their paid services, and each works under its own terms. The subprocessors page lists every one.
The vault Backups locked to your key
- Locked to your key. A snapshot every night, kept 30 days. Once your client vault is set up, every backup and export is encrypted to your business's own key.
- Emergency Kit. The owner gets one recovery key to keep somewhere safe. It opens any backup, even on your own computer.
- Break glass. Lose the kit and we can help: we keep a sealed emergency copy. Using it normally means you ask, every owner and admin is told, and a 4-hour wait you can cancel with one tap, all logged. We're upfront that we could open it, which is why every normal use is announced and logged.
- Access log. A tamper-evident log shows the owner every time anyone outside your team touched the workspace.
Minion Sidekick and sign-in
- Permission per site. Banking and payment sites are blocked.
- Hand-off at any password step: you type it, never the minion.
- Your yes before saving, submitting, sending or deleting.
- One off switch. Disconnects every device at once.
- Sign in with Google, Microsoft or a passkey.