Trust & security
Built so you're always in command.
The approval gate.
Oprativ's AI can read, prepare, and draft, but it cannot send an email, make a payment-affecting change, or touch the outside world on its own. Consequential actions stop at a human gate: you see exactly what's about to happen, and it happens only when you approve. This is enforced by the software's architecture, not by a policy we hope the AI follows.
The permanent record.
Every action, whether yours or an assistant's, lands in an append-only ledger: who, what, when, what it cost, whether you approved it. Printable. Exportable. Your audit trail and your operations cost ledger in one.
Your data, your machine.
The product's knowledge of your business lives in files on your computer (or your own private hosted space), not in a shared cloud. Your data lives on your machine. When a task needs a frontier model, only the excerpt it needs travels — through a zero-data-retention pipe: processed in memory to produce your answer, never stored, never used to train. Our own servers handle only accounts, licences and payments.
Poison-proof by design.
Content the AI merely reads (a stranger's email, a web page) can never itself trigger an action. Those paths are separated in the architecture, so a malicious message can't puppet your workforce. Outgoing messages that touch payment details are checked against your own records before anything sends.
Backups that answer to you.
Back up to a destination you choose: a private git remote or an external drive. Your credentials stay in your OS keychain, never in the backup, so a backup can't leak a key. Restore rebuilds your vault byte-for-byte, with history. End-to-end encrypted backup is on the way.
Full-disk encryption, required.
Oprativ requires full-disk encryption before it will handle real customer data, so the data at rest on your machine is protected by the operating system, not left in the clear.
Honest limits.
Oprativ tells you when it isn't sure instead of guessing; it stops at your spending allowance instead of billing you; and it shows its sources so you can check its work.
The boring essentials.
UK company, registered with the ICO as a data controller (ICO registration ZC200235). Payments processed by Paddle (our merchant of record); we never see or store your card details. Software updates are signed. Questions: hello@oprativ.ai. A human reads it.