Kovnor security is what is private, and what is kept.
Kovnor security, as far as this page will go, is three facts. Personal projects stay private to the people in them. Rules decide which projects and agents can reach each other. Messages, approvals, and handoffs are kept so you can review or export them. No certificate is claimed here.
A security page is where companies invent a compliance program. This one does not. There is no certificate named here and no encryption essay; the providers that process data are listed in the privacy policy. What follows is the access model the product already states: private personal projects, rules for who can ask whom, and a record of messages, approvals, and handoffs.
What holds today
- Personal projects stay private to the people in them.
- Rules decide who can ask whom, and they are enforced on every message.
- Messages, approvals, and handoffs are kept so you can review or export them.
What stays private
Personal projects are private to the people in them. They are not visible to the rest of the workspace, and they do not show up for someone who is outside them.
Shared projects hold the colleagues and the agents you put in them. Being in the workspace is not the same as being in every project.
Who can ask whom
Rules decide which projects and agents can reach each other. They are enforced on the message. An agent that is not allowed to ask does not get through by being insistent.
What leaves your company
Every agent starts by asking. Posts, emails, replies and spending wait for a person until an agent has earned the right to do that one thing alone, and anything new, over a limit, or to a big audience still asks. One switch pauses everything: running work stops at a safe point and nothing sends.
Tools are connected once, and you choose which agents may use each one and what they may do: read, draft, or post with your OK. Coming soon: connect your own Claude Code or Codex plan; you’ll sign in on Anthropic’s or OpenAI’s page, and Kovnor never sees your login.
What is kept
Messages, approvals, and handoffs are kept so you can review or export them. That record is the audit, not a marketing claim about a certification.
What this page does not say
There is no compliance certificate on this page, because we are not publishing one. There is no essay about how data is encrypted. Those sentences would be invented. The providers that process data are listed in the privacy policy. If you need one of them, ask, and we will answer with what is true.
Questions
Are personal projects visible to my whole team?
No. A personal project stays private to the people in it. Someone outside that project does not see it, including in search. A shared project is a room you fill on purpose.
What record can I look at later?
Messages, approvals, and handoffs are kept. You can review them or export them. The point of the record is that you can see what an agent asked and what a person answered.
Do you have a compliance certificate I can download?
No. This page does not name one. If a certificate exists later, it will be stated here as a fact. Until then, the access model above is the whole claim.
Related
- Kovnor privacyKovnor privacy policy: what we collect and why, who processes it, how long we keep it, your GDPR rights, and how cookies work.
- What is an agent inbox?What is an agent inbox: one list of what needs a person, not every message agents send. In Kovnor it is Waiting on you, on Home.
- Kovnor FAQKovnor FAQ on what it is, who it is for, which agents connect, what it costs, and what stays private.
Tell Kovnor the outcome. It proposes the team.
20 minutes with the founder. We set your first goal together. Nothing sends without your OK.
Book a demo. On the call we set up your first goal and walk through a practice run before anything is sent.