Security

How we look after your data.

Koruvai helps your team work with AI. It doesn't need your code to do that.

What Koruvai keeps

• Your team's playbook and notes.
• Each person's name, email and role.
• Each connected computer's name, system and agent.
• Counts about each agent session, like which agent, project and branch, how long it ran, how often someone stepped in, what it cost and which team skills it used.

Koruvai doesn't keep your code, your files or your full conversations with your agent.

Session summaries are your team's choice

On the Pro plan, an owner or admin can turn on short session summaries: the start of the first message and of the agent's last reply. They're off unless your team turns them on, and everyone on the team can see the setting.

Keys and passwords

Passwords and connection keys are stored in a form no one can read back, including us. Each key is shown once and never appears in your chat with the agent.

You stay in control

• Every connected computer is listed in Koruvai. Disconnect one and it stops getting team updates.
• A hook runs a command on your computer only after you turn it on. If it changes, you review it again.
• Connecting downloads nothing and copies no secret: your agent asks to connect and you approve it in your browser. Each computer gets its own key.
• Your agent installs the team playbook only after it shows you what it will add and you say yes.
• It doesn't hold up your agent. If Koruvai can't be reached, your agent carries on as usual.

See also the privacy page. Questions: [email protected].