How Staffie keeps your business safe

You approve anything that leaves the office

• Email replies are saved as drafts in your mailbox. Agents only send email directly if you switch that on.
• Social posts, website deploys, client deliverables and production changes wait for your Approve, in the dashboard, the Staffie app, WhatsApp or Telegram.
• Every task keeps a record of what was done, by which AI employee, and what it produced.

Your office is isolated

Each customer office runs as its own operating-system user with its own files, settings and credentials. One office cannot read another office’s files.

Connections to Staffie use HTTPS (TLS). Passwords are stored as salted hashes, never in plain text.

Credentials stay on the server

Connector tokens and API keys (Google, Meta, Canva, GitHub and others) are stored server-side and are never shown again after you save them.

Where a service offers OAuth, you sign in with that service directly and Staffie never sees your password. You can disconnect a connector at any time.

Content is data, never instructions

Emails, web pages and files the agents read are treated as information to work with. A message that tells an agent to “run this” or “send that” is ignored.

Your data is not used to train AI models

Agents run on Anthropic’s commercial API, which does not train models on customer data. We do not sell your data or use it to train models of our own.

Spending limits

Each plan has a monthly AI budget. You can see spend per day, per AI employee and per project, and set your own limits so no task can run up an unexpected bill.

Report a vulnerability

If you believe you have found a security issue, email [email protected] with “Security” in the subject. Please give us reasonable time to fix it before disclosing it publicly. We will acknowledge your report and keep you updated.