Security & trust
Security you
can read.
Anyone can write “bank-level security” on a landing page. This is a ledger of what we actually run, and where you can check it.
MOBBY · WINDOWSMicrosoft Store certifiedEV code-signed, malware-scanned, published by Microsoft.View listing →
MOBBY · MACOSNotarized by AppleSigned with our Apple Developer ID; opens with no security warning.Download →
MOBBY · LINUXOfficial Linux buildsx86_64 packages (.deb, .rpm) from GitHub Releases, exact sizes shown.Download →
PUBLISHER · CHROMEChrome Web Store reviewedPassed Google’s privacy and security review. Free to install.View listing →
The ledger
CLAIMWHAT WE ACTUALLY RUNHOW WE KNOW
Hosted in the EUData we must keep lives on a server physically in France — not a US hyperscaler.Named on this page
We don’t train on your dataYour content powers only your own assistant — never shared or public models.Policy
Backups that restoreDaily encrypted backups plus point-in-time recovery, proven by restore drills on a scratch copy.Restore drills
Credentials encrypted at restAPI keys and secrets kept in dedicated key management, separate from the running service.Architecture
Per-business isolationEach business’s data, settings and keys separated and access-controlled.Architecture
Right to erasure, with proofOne action removes a person from conversations, leads and threads — with a verification report.UK GDPR
Every login on recordAdmin sign-ins logged with who, when and where; lockout on repeated failures; optional passkeys.Audit log
Hardened serversFirewalls, automatic banning of break-in attempts, key-only admin access — no password to steal.Live status →
Two different questions
Where it’s stored vs. where it’s processed
STORAGEFrance, EUWhat we must keep.
PROCESSINGNamed AI providersGemini, Groq, OpenRouter, DeepSeek — the message is sent to generate an answer.