Skip to content
MAKINA

Security

Trust You Can Check

Operator keeps your work where you decide, asks before it acts, and writes down everything it does, so its work can be checked instead of taken on trust.

Read the privacy policy

How Operator Keeps Work Safe

  • Your infrastructure, if you want it

    In a private deployment the agents, the models and the data run on servers you own, through Exos Private Cloud or your own. None of it passes through Makina's cloud.

  • A computer for every agent

    Each account's agent works on its own computer, so one person's files and screens never mix with another's.

  • Approvals before consequences

    Anything that leaves the computer or cannot be undone waits for a person. A service can never decide an approval.

  • Takeover for sign-ins

    Operator never asks for a password. When a site needs one, you hold the screen and type it yourself.

  • A sealed journal

    Every step is appended to a journal whose SHA-256 chain breaks if any entry changes afterwards.

  • Signed receipts

    Each consequential action carries a receipt signed with ECDSA P-256, with the signing keys in your settings.

  • A brake on spend

    Every task stops at its budget, every day at your limit, and Operator never moves money.

  • Sign-in you already trust

    Accounts sign in with Google or a one-time code by email, through WorkOS. Idle sessions end on their own.

  • Your work stays yours

    We do not train models on your work, show advertising, or sell personal data.

The Services Behind Makina's Cloud

Each one receives only what its part needs. In a private deployment, these parts run on your infrastructure instead.

In Makina's cloud

  • WorkOSSign-in
  • StripePayments, on Stripe's own pages
  • E2BThe agents' computers
  • Fly.ioHosting and the database, United States
  • TigrisFiles, screens and saved workspaces
  • OpenAIThe default model
  • OpenRouterThe other catalog models
  • Temporal Cloud and UpstashCoordinating runs, identifiers only

Questions About Your Data

What Makina keeps, where it is kept, and who else handles it.

Read the privacy policy
Do you train models on my work?
No. We do not train models on your work, show advertising, or sell personal data.
Where is my data kept?
In Makina's cloud, with Fly.io in the United States, and files, screens and saved workspaces with Tigris. In a private deployment, on your own infrastructure.
What does the model see?
What a run works with: the task, the messages, what is on its computer's screen and what its tools return. That goes to OpenAI for the default model and through OpenRouter for the others; we ask OpenAI not to store what it is sent. In a private deployment it goes to your own models.
Can Operator see my passwords?
It never asks for one. When a site needs a password, you take over the screen and type it yourself.
How long do you keep my work?
For as long as your account exists; nothing is deleted automatically yet. To have your account and its data deleted, write to contact@makina.so.
How do I report a security problem?
Write to contact@makina.so or use the contact page. We read every message.

From the Journal