CONTROL, WITH CONTEXT

Security at Xentropy

Your workspace is private by default. Access depends on your identity, ownership, and the permissions granted to each credential.

Agent access

API keys can be scoped to actions and restricted to selected resources. A subscription never expands those permissions. Revoke credentials from Settings when they are no longer needed.

Connected accounts

Authorize the sources and resources you need. Integration credentials are encrypted at rest using application-managed encryption keys. Disconnecting a source prevents subsequent authorized provider calls.

Payments

Stripe hosts Checkout and payment management. Xentropy does not store raw card numbers or CVCs. Subscription state and quotas are enforced on the API, including agent and background execution paths.

Sharing

Sharing and publication are explicit actions. A shared link can make selected output available to anyone who has it; publication makes selected content public. Revoke or unpublish work when access is no longer intended.

Report a concern

Contact support@xentropy.ai with a description and reproduction steps. Do not email passwords, private keys, or customer data.