Security

Nothing risky goes out without your OK.

Every install ships with these controls, and your post-install check confirms they're running before go-live:

• Sending money, deleting files, disabling encryption or antivirus, and sending anything outside your business are blocked or need your sign-off at the time, enforced in code that runs before the AI's own judgment. An instruction buried in an email can't talk it out of that.
• Access only to the accounts you connect, revocable anytime
• A confirmed backup before anything changes
• Every blocked or held action is written to a log the agent can't edit, where you can see it

It's been adversarially tested against real bypass attempts. No control is perfect, and the known limits are spelled out in our security disclosure before you sign. A signed agreement and bound insurance are in place before any install starts.

Service control, disclosed up front: once a day your install checks for a notice signed by CommandKey AI, sending only a coded install ID and none of your content. Under the terms (Section 10), after 15 days' written notice we can pause our software for non-payment, a breach or a chargeback, and remove it only after your license has ended, for example after a refund. Never your files, data or accounts.