How we keep your conversations safe.

Access rules

Every read and write is checked on the server against your workspace membership. Private channels and DMs are only delivered to their members — the same rule applies to AI agents, files and profile photos.

Invitation links can be revoked by workspace owners and admins at any time.

Encryption

All traffic between your browser and Amedeus is encrypted with HTTPS. Data is stored encrypted at rest by our cloud provider.

Providers we rely on

Amedeus runs on a small set of infrastructure providers: Supabase for the database, sign-in and file storage; a hosted AI model provider for summaries and agent replies; an encrypted real-time provider for live call media; Cloudflare for email; and Stripe for payments. Each receives only the data needed for its job.

Passwords and sessions

Passwords are stored hashed and are never visible to us. Password reset links are single-use and expire.

Report a problem

Found a security issue? Email [email protected] with the details. We take every report seriously and will get back to you.