Security at Alfred 3
We take security seriously. Your code, your credentials, and your team's data are protected by design — not as an afterthought.
Encryption in transit
All data transmitted between your client and Alfred's servers uses TLS 1.3. We enforce HTTPS on all endpoints.
Encryption at rest
User data and project artifacts are encrypted at rest using AES-256. Encryption keys are managed separately from data.
No code used for training
Your source code and project context are never used to train AI models. We process it transiently to run your agents and then discard it.
Access controls
Role-based access controls ensure team members only access the projects they are authorized for. All access events are logged.
Dependency scanning
We run automated vulnerability scanning on our dependencies and apply security patches as soon as they are available.
Credential isolation
API keys and credentials you connect (GitHub, Notion, Slack, etc.) are stored in isolated secret stores and never logged.
Responsible Disclosure
Found a vulnerability?
We appreciate responsible disclosure. If you discover a security vulnerability in Alfred, please email us before disclosing it publicly. We will acknowledge your report within 48 hours and keep you updated as we work to address it.
[email protected]For general privacy questions, see our Privacy Policy.