Trust & security
How the desk keeps your research under your control.
How we protect your work
Here is what the desk does today to keep your account, your research and your spending under your control.
Your sign-in
Passwords are stored only as salted hashes, never as plain text. You can turn on two-step sign-in with an authenticator app, with recovery codes in case you lose your phone.
Your sessions
Sign-in sessions are kept in cookies that the page's own scripts cannot read, and closing your account ends every session at once.
Encrypted connections
The desk is served only over HTTPS, using TLS 1.2 or later.
Where it runs
The desk runs on Amazon Web Services, with its database on a managed PostgreSQL service and a backup taken every night.
Approvals and limits
Risky actions wait for your approval. Each case runs within its own spending cap and each person within a spending limit, and agents never trade or publish on their own.
A trail for every call
Every model call is recorded with who made it, the model it used and what it cost, so activity and spending can be reviewed at any time.
The AI models
Answers come from Claude, GPT or Grok. When you ask a question, its text and the context needed to answer it are sent to the provider of the model in use.
Seats by invitation
Access is by invitation only, and each seat is arranged directly with the desk.
Closing your account
You can close your account yourself at any time. Doing so ends your sign-in and every session immediately, and your notes and case files are kept unless you ask us to remove them.
Security reviews
We do not hold third-party security certifications yet. If your firm has a security questionnaire, send it through the request form and we will answer it.