Security

Your Workspace, your rules

A teammate works inside your company. Here is how we keep what it handles safe.

Access you grant, and can take back

  • Delegmate reaches your Workspace only through access your admin grants in the Google Admin console, and you can take it back there at any time.
  • It works as the teammates’ own accounts, in a unit of their own. It never opens a person’s mailbox, calendar or drive: a teammate sees only what is shared with it or sent to it.
  • The dashboard is for your Workspace admins, the people they give a role, and each teammate's own people for that teammate alone, signed in with Google. Every change is listed for your admins.

Encrypted, in transit and at rest

  • Everything travels over TLS.
  • Logins handed to a teammate are encrypted with AES-256-GCM and never shown to anyone, the teammate included: it fills them in without seeing them. Tokens for Slack and other connections are encrypted the same way.
  • Backups are encrypted before they are written, and kept for 14 days. The database accepts connections only from inside our servers.

AI that works for you, not on your data

  • Teammates think with models from Anthropic, OpenAI and Google, under business terms that don’t let them train on your data.
  • Each teammate’s computer and browser are its own, isolated from every other teammate’s and every other company’s.
  • What a teammate reads from outside (an email, a web page) is treated as information, never as instructions it must follow.

People in charge

  • Teammates ask a person before spending money, contacting someone new outside your company, or doing what can’t be undone.
  • Outsiders can write to a teammate, never instruct it.
  • Nobody at Delegmate reads your data without your permission, except to keep the service secure or where the law requires.

Your control, always

  • Pause or remove a teammate at any time, and set a daily spending limit for each.
  • Download all your data, or delete all of it, in Settings.
  • A removed teammate’s data is deleted after 30 days; a company’s, within minutes of asking.

Every step on the record

An activity log shows what each teammate did, where and why, including every change it made in a connected app. Your admins see every sign-in and setting change too.

Delegmate

Activity

  • Emailed Maya three CRM options with pricing2 min ago
  • Answered Sam’s comment on the launch plan40 min ago
  • Joined “Weekly sync” and sent the notes1 h ago
  • Updated deal “Acme renewal”: stage to Proposal2 h ago
  • Asked Sam before paying the venue deposit3 h ago

Reporting a problem

If you find a vulnerability, write to [email protected]. We reply within two working days and tell affected customers of a breach within 72 hours.

The paperwork

Add your first teammate today

Sign in with your Google Workspace admin account. It takes a couple of minutes.