Security

Your data stays yours

• We never sell your data or use it to train AI models.
• When an account or a company is deleted, its chats, knowledge, files and app connections are deleted with it.
• Admins can export everything Guile knows about the company, at any time, as Markdown or JSON.
• Data is stored in the United States.

Isolated by design

• Every request is tied to your signed-in company, never to anything a browser sends.
• Data is encrypted in transit and at rest. Credentials for your connected apps get a second layer of AES-256 encryption.
• No passwords to steal: people sign in with a one-time email code, Google, or a passkey.
• Agent code runs in an isolated sandbox with no internet access unless an admin turns it on.

You stay in control

• Admins choose which AI providers the company uses, and every answer shows which model wrote it.
• Sensitive knowledge can live in restricted spaces that only named people reach, and can require providers that keep no copy of your data.
• Admins cannot read members' private chats.
• Connected apps are read-only by default. Any action in them asks first.
• Every fact Guile learns shows where it came from, and every change can be undone.

How we build

• Every change is reviewed and tested in a real browser before it ships, and rolled back automatically if production checks fail.
• Code, dependencies and secrets are scanned continuously.

Service providers

See who processes data on Guile's behalf and why in our service provider disclosure, and what we keep in our privacy overview.

Report a vulnerability

If you find a security issue, email hello@goguile.com with “Security” in the subject. Please give us a chance to fix it before sharing it publicly.

Reviewing Guile for your company

If your security team has a questionnaire, contact us and we will answer it.