Your workspace is yours alone.

One workspace per client

Everything a client sees in the OS belongs to one workspace: theirs. Every table in the database carries the workspace's id, and the database itself enforces the wall (row-level security), not only the pages. A request from your account can return your rows and nobody else's.

A test runs on every change to the software to prove one workspace cannot reach another.

Where your data lives

The OS runs on Vercel in Frankfurt and keeps its data in Supabase in Frankfurt, Germany. It is handled under the GDPR, and under the CCPA for Californian clients.

Your data is never sold and never shared with anyone outside Ophanim and the services the OS is built on: hosting, the database, Anthropic for the AI, Stripe for payments.

Ask us to delete your workspace and everything in it, and we do.

How you sign in

Passwords must be at least 10 characters, must not contain your email, and must not be one that has already appeared in a known data breach. Repeated wrong attempts put the account on a wait, and reset emails are limited.

Two-factor sign-in is available to every account, with an authenticator app: your password plus a six-digit code from your phone, so a stolen password alone opens nothing.

Sessions live in secure cookies that scripts cannot read, and are refreshed on every request. Changing your password ends every session.

The keys you connect

Blotato, Apify, Fathom and your calendar connect through keys you paste once. Each key is encrypted (AES-256) the moment it is saved, decrypted only on our servers at the moment the OS uses it for you, and never shown again, not even to Ophanim's staff.

Revoke the key where you made it and the OS loses access at once.

What the AI can see

Your AI answers from your workspace and nothing else: every tool it has is bound to your workspace before it runs. It can search the web and read a link you give it, and that is all it can do outside: it has no email, no LinkedIn, no messaging, and cannot send anything to anyone.

The models are Anthropic's Claude through their business API, which does not use what it processes to train models. The durable facts it keeps from your conversations sit in a memory log you can read and delete.

Payments

Card payments go through Stripe. Card numbers never touch Ophanim's systems. Crypto payments go to wallet addresses we give you in person, confirmed by our staff.

Who at Ophanim can see your workspace

Ophanim's staff can open your workspace to support you: the same pages and numbers you see. They cannot read your keys, and nobody can read your password.

Reporting a concern

Something that looks wrong, a message claiming to be from Ophanim asking for a password or a payment outside the OS, or a device lost with an open session: open a ticket on the Support page inside the OS, or write to the address in our Terms. Security reports are answered before anything else.

Ophanim never asks for your password.