Built to be trusted with your data

Every database connector enforces SELECT-only SQL with a statement guard, and API connectors are restricted to GET requests. Aira cannot write to, change, or delete anything in your systems. Admins can additionally limit a source to specific tables or files.

Connector credentials are encrypted at rest with a key derived per organization, so no tenant's key can open another tenant's data. The root secret lives in AWS SSM Parameter Store under a KMS key and is never stored on disk.

Data sources, dashboards, alerts, and conversations are scoped to a workspace. Team members only see workspaces they are explicitly given access to, and the agent's tools enforce the same boundary on every query.

A policy engine sits between Aira and every tool call: reads are allowed, consequential actions require your explicit approval in chat, and prohibited actions are blocked outright. Suspicious content inside your data is flagged, never obeyed.

OAuth tokens and database passwords are injected server-side at request time. The model sees results, not secrets, and streamed events redact server paths.

Export everything we hold about you, erase Aira's memories per workspace, or delete your account from the profile page, in line with India's DPDP Act and GDPR. See the privacy policy for retention details.

Hosted on AWS in ap-south-1 (Mumbai) with TLS everywhere, isolated per-session working directories, and audit logging of sensitive actions. Payment processing is handled by Razorpay; card details never touch our servers.

Report a vulnerability or ask about our posture at contact. We maintain a security.txt and respond within one business day.