API key isolation
Production credentials should remain outside the browser, agent prompts and shared memory. Scope access to the required service and support revocation without rewriting brand context.
PRIVACY BY DESIGN
Enterprise privacy, isolated credentials and scoped agent access are requirements for the production deployment, not decorative promises.
Production credentials should remain outside the browser, agent prompts and shared memory. Scope access to the required service and support revocation without rewriting brand context.
Personal and business context should be separated at retrieval, routing and release. Test cross-profile access explicitly, not just the labels in a console.
Publishing, messages and spend require human approval. A production deployment must record what was approved, by whom, and the context used for the action.
Hosting, model providers and connected platforms affect privacy. Retention, residency and provider data usage need deployment-specific review. No independent audit or security certification is claimed here.