Trust is the product.
You’re trusting AI with your accounts, code and money. Here’s how Ghloo keeps that safe.
Nova asks you to approve deploying one exact commit with the evidence attached; you approve with your passkey.
Nothing is allowed until you allow it
Seats start with no access. Every capability, from reading a folder to sending an email, is granted by you and can be taken back at once.
Your yes covers one action
Approvals are bound to the precise recipient, amount, file and time. Anything changes, and it asks again. Purchases and sensitive actions need your passkey.
One button, every seat
Stop halts every seat and every running action immediately, and revokes any timed permissions.
“Your squad can use your secrets. It can never see them.”
Seats ask for a secret by name. The engine fills it in outside the model, only on the right site.
Work happens in isolation
Code runs and browsing happen in separate sandboxes per run, not on your accounts directly. What a seat can reach is limited to what its task needs.
Every step is on the record
Each action leaves a receipt you can open: who asked, what ran, what it cost, what came back. Nothing happens off the books.
Yours, and portable
We don’t train models on your data. When you use a provider’s model, that provider’s terms apply to what it sees. Local-only projects never leave your computer. You can export or delete everything.
Pages, emails and other agents can’t give orders
Text that arrives from a website, an email, a file or another Ghloo is treated as data. Instructions hidden in it can’t approve or trigger anything.
Don’t take our word for it.
The engine will be open source after an independent review. Found an issue? Tell us privately through our contact form.
Save your seat
at the table.
We’re inviting people in waves. Everyone who joins with your link moves you up.
Share your link. Each person who joins with it moves you up 50 places.
By joining you agree to the terms and privacy notice.