Security & trust
Your account, and what it takes to get in.
How you sign in, what stops anyone else, what happens to the things you write, and what the assistant may do without asking. All of it in plain words.
Getting in
Three ways in, and one of them is one tap.
Use a password if you like one. Or sign in with the Google or Microsoft account you already have — no new password to remember, and whatever protection you set up there comes with you. Connect both and use either.
- One tap with Google or Microsoft
- Or a password, if you would rather
- Add or remove any of them from your settings
- Read back every sign-in yourself, whenever you like
Layered protection
Safeguards at every step.
Security isn't one thing — it's a series of checks that back each other up.
A second step at sign-in
Add an authenticator app, so getting in needs a code as well as a password — and keep ten single-use codes for the day you lose your phone.
It asks again for the big changes
Turning off that second step, or anything else that changes how you get in, asks you to prove it's you one more time.
Doors that shut
Too many wrong attempts and the account locks itself, so guessing doesn't work. Change your password and anyone signed in as you is signed out everywhere at once.
Private by design
Your conversations stay yours.
Every conversation is saved to your account so you can come back to it, and it is encrypted where it is kept. We never sell what you write, and you can delete any conversation — or your whole account — whenever you decide to.
- Saved to your account, and encrypted
- We never sell what you write
- Delete any conversation, or your account, whenever you like — with a few days to change your mind
Acts on your terms
It acts only when you say so.
When it works in the apps you have connected, it looks at what it needs straight away — and anything it would change stops and waits for your yes, unless you have told it to get on with that job by itself. You see exactly what it plans to do first.
- It looks straight away, and changes nothing until you say so
- You see exactly what it will do before you approve
- Some connections, like Microsoft Entra ID, can only look
- Disconnect any app whenever you like — it loses access immediately
When it searches the web
One thing leaves, and this is it.
Searching the public web is the one time anything you have written goes anywhere else: the words your question is searched for go to Microsoft's search service, so it can find pages to read. Nothing travels with them — not the rest of your conversation, not your documents, not anything in the apps you have connected.
- Only the search words leave — never the conversation around them
- The pages an answer rests on are named underneath, so you can see what it drew on
- Switch it off in one chat, for one agent, or for everything you start from now on
When you ask for help
A support conversation is held to the same standard.
Asking for help means showing us something. So here is exactly what that conversation holds, who can open it, and when it goes.
- It holds your name and address, the subject you gave it, everything either side writes, and any file you attach.
- What you write and what you attach is encrypted. Keep the subject line short and general, and put the details in the message.
- Our support team can read it while they are working on it. It is never shown to another customer.
- The team's assistant can summarise a conversation or draft a reply. It never writes to you on its own — and when it drafts a reply, it is shown the conversation alone, never our private notes.
- A conversation opened from your account goes when your account goes. One opened without an account is deleted 180 days after it closes.
Security questions, answered.
You add an authenticator app, which shows a code that changes every few seconds. When you sign in you type that code as well as your password. You also get ten single-use codes to keep somewhere safe, in case you lose your phone.
Yes — sign in with your Google or Microsoft account instead. You can add a password later from your settings, and connect either of them as another way in.
Anyone signed in as you is signed out straight away, everywhere.
Yes. You do it yourself, and there are a few days afterwards in which you can bring it back if you change your mind.
Only when it searches the web, and only the words it searches for — they go to Microsoft's search service so it can find pages to read. The rest of your conversation, your documents and your connected apps never go with them, and you can switch searching off in one chat, for one agent, or for everything you start from now on.
Security that stays out of your way.
Join the waitlist. Your protection is ready the moment you're in.
Every account gets the same protection.