Security

Ahel holds the keys your pipelines need, so the rules are short and strict.

#Keys

• Keys are sealed on the server, bound to your workspace.
• No endpoint reads a key back out.
• Keys never cross the MCP link. Ahel attaches them server-side.

#Writes

• Nothing writes anywhere until you confirm it.
• Every activation and every write shows what will happen first.

#Records

• Every call and every key use leaves a receipt on your Activity page.
• Owners and team leads can export the audit log as a CSV or JSON file.

#Your data

• Ahel never trains models on your data.
• Application data is hosted in the European Union.

The full picture, including what does not exist yet, is at ahel.ai/security.