Security
What we keep, and how.
Keepthru reads your team's Slack, Jira, Trello, GitHub and calendar to follow its promises. This page says where that data lives and what never leaves our server.
Where it lives
Hosted in the EU
Keepthru runs on Amazon Web Services in Ireland (eu-west-1), in an AWS account of its own. The database is encrypted at rest, and every connection to Keepthru is HTTPS.
Connection tokens, sealed
The tokens that let Keepthru read Slack, Jira, Trello, GitHub and Google Calendar are encrypted with a key kept apart from the database. Nothing shows them again once they're saved.
One Workspace at a time
Every read and write is bound to one Workspace in code, and a test for every route checks that nothing crosses from one Workspace to another.
Secrets in Checklists
A password or key someone asks for in a Checklist is stored encrypted, never synced to devices or exported, and every time someone reveals it is recorded.
What leaves our server
Keepthru sorts real asks from chit-chat with a small model that runs on our own server. No message text goes to an AI provider, and none is written to our logs or error reports.
One thing is optional. If an Admin turns on written summaries, the Digest and Status write-ups open with a paragraph from Anthropic's model, or from the Workspace's own Anthropic or OpenAI key. It reads titles, states, dates, names and counts. It never reads descriptions, Check-ins, Decisions or messages. Summaries are off until an Admin turns them on.
Payments go through Paddle. Your card details never reach us.
Who gets in
No passwords
You sign in with a 6-digit code by email, or with Google. Sessions are kept on our server and end everywhere at once if you ask.
Each Member sees their part
A Member sees what they owe or are owed, what sits under it, and what is shared with them. Guests see only what is shared.
Agents act as you
An agent you connect gets only what you can see and do. You approve each app, choose read-only or not, and revoke it at any time.
Your data stays yours
- Export everything, as JSON and CSV, whenever you like, even after a subscription ends.
- Delete a Workspace and, after a 7-day grace period, every row of it is erased. Backups expire on the schedule in our Privacy Policy.
- A Workspace left unpaid for 60 days is erased, with warnings before.
- Disconnecting a source revokes Keepthru's access at the provider.
The details are in the Privacy Policy, the data processing agreement and the list of subprocessors.
Found a problem?
Write to [email protected] with what you found and how to see it. We answer every report and fix what's real.
Try it on what you owe this week.
The trial is 14 days of the whole product and needs no card. You choose Team or Solo when you subscribe.
Start a free trial