Security and data handling at TrinityCorp
TrinityCorp runs AI employees that touch real business systems — mailboxes, calendars, CRMs and file storage. That only works if the boundaries are explicit. This page describes how client data is separated, how risky actions are gated, what we log and how credentials are stored.
Tenant isolation
Every client is a separate tenant. Employees are provisioned against a tenant identifier and cannot read another tenant's data, credentials, files or conversation history. Database access is enforced with row level security at the row, not the application, layer, so a bug in the interface cannot expose another client's records. Uploaded files live in private storage and are served only through short-lived, authenticated links.
Human approval on risky actions
Actions are classified by risk during onboarding. Anything irreversible or externally visible — including sending email — defaults to requiring human approval. Email may run autonomously only for a task where the customer has explicitly granted and signed consent. Granting an employee more autonomy is recorded, never a silent default.
Audit logs and spend caps
Every action an employee takes is recorded in an activity log with the task, the model used and the tokens consumed. Cost is metered deterministically from reported tokens rather than estimated after the fact, and each employee has a daily ceiling. When the ceiling is reached the employee is paused automatically and resumes the following day, so a runaway loop becomes a pause rather than an invoice.
Credentials and third-party access
Google and Microsoft access is granted through the standard OAuth consent screens, with the narrowest scopes each duty needs. Tokens are stored encrypted, are scoped to a single employee, and can be revoked instantly from the portal or from your own Google or Microsoft admin console. We do not ask for, store or display service-level administrative keys to end users.
Our privacy policy and terms of service set out the contractual side of the same commitments.