Boundaries you can check. Not badges.
Five walls, each one something you can test on your own board.
The five walls
- Isolation
One workspace, one wall.
Nothing in yours is visible to another workspace, or to an expert you have not granted.
- Secrets
Secrets stay in the broker.
Your credentials are never shown to models, experts, logs, or exports.
- Approvals
Named actions, approved intent.
Anything that reaches another person waits for you, shown as the exact content and destination.
- Receipts
Evidence, not narration.
The card records what the provider confirmed. A timeout becomes Outcome unknown, never a silent retry.
- Leaving
Everything, any time.
Export it all except secrets. Delete the workspace and it stops.
A receipt from a card that could not confirm
Send the proposal
- Contact update
- Confirmed
- Outcome unknown
Checking whether sent. The provider timed out after the record change.reference 5F12-98
What we do not claim.
- No uptime number, and no service level agreement.
- No SOC 2, HIPAA, or GDPR compliance claim.
- No “bank-level security.” The phrase names no control we could show you.
- No guaranteed delivery. A provider accepting an email is not delivery.
- No agent browsing the web unless you turned that on with your own accounts.
When any of that changes, this page will say so, with the evidence.
Questions
The questions a skeptic asks.
Where does my data live?
In your workspace, isolated from every other one. Files, history, and receipts are yours to export.
Does BakedBrie train on my data?
No. Your AI provider's terms govern what your provider does; you connect to it under your own account.
Who can see my credentials?
Nobody. A connection broker holds them and hands each action a short-lived, narrowly scoped authority.
What can an expert see?
Only installations you granted: version, status, last run. Never credentials, never other boards.
What happens when I delete a workspace?
Connections are revoked, jobs stop, Upkeep ends, and your data leaves live storage and search. Backups age out on a fixed schedule.
What if a provider times out mid-action?
The card goes Blocked with Outcome unknown. We reconcile with the provider's identifiers or ask you to check. Nothing consequential is repeated on a guess.