Security and data, in plain words.
Chief reads your mail and watches your sign-ins, so it has to be the most careful member of your team.
Where your data lives
- 01Chief runs on Microsoft Azure in the UAE North region. AI processing uses Anthropic's Claude models. Nothing leaves your company without a person approving it.
- 02Its database has no public network access and is reached only over a private connection.
- 03Keys and secrets are in Azure Key Vault, read at run time by Chief's own managed identity.
What Chief can see
Only what your admin grants.
Mail
Mailbox access is granted mailbox by mailbox through Exchange.
Security data
Read-only.
Chats
Chief only reads chats it has been added to.
What Chief will not do
Move money or sign.
Chief cannot pay, sign or accept contracts, quote prices or commit dates. Those tools do not exist.
Take orders from emails.
Instructions hidden in an email, document or log are treated as data. After reading outside text, Chief won't take an action in the same turn.
Train on your data.
Chief does not use your company's data to train models.
Message people at night.
Working hours and quiet nights are set per company, and Chief never phones anyone between 23:00 and 08:00.
Promise reply times.
Chief never commits your team to a deadline on your behalf.
Every action recorded
Each tool Chief uses is written to an audit log before and after it runs. There is a company-wide off switch that stops Chief at once.
Outside text is data, not orders
Instructions hidden in an email, document or log are ignored, and after reading outside text Chief won't take an action in the same turn.
- Certifications, honestly
- Chief is not yet certified. SOC 2 and ISO 27001 are on our roadmap. A data processing agreement is part of Enterprise contracts.
- Your data when you leave
- How long data is kept and how it is deleted is set in your contract.
Report a security issue
If you think you have found a security issue in Chief or this website, email security@hellochief.ai with what you found and how to reproduce it. Please don't include anyone's personal data, and give us a reasonable time to fix it before sharing it.
See Chief run a real day.
Book a demo with the ITSEC team. We'll show Chief working in Teams and answer your questions.