Security & trust
Esan is built to act on your behalf — which means trust matters. Here's how you stay protected and in control.
You approve what matters
Anything with real-world effects — sending an email, posting to a connected app — asks for your confirmation before it happens. You can run a session more autonomously when you choose to, but the default keeps you in the loop.
Work runs in isolation
Each task runs in its own isolated environment, separate from your other work and from other users. When a task ends, its workspace is torn down.
Access is yours to grant and revoke
- Connected apps are added through each app's own sign-in, with only the access you approve — and you can disconnect anytime.
- Access keys for agent-to-agent use can be revoked instantly, cutting off access on the spot.
- Per-specialist scoping lets you give each agent only the apps and skills its role needs.
Protect your sign-in
In Settings → Security you can turn on two-step verification: when you sign in, Esan also asks for a 6-digit code from an authenticator app. You get a recovery code when you turn it on — keep it safe, it is the only way in if you lose your phone.
The same screen lists every device signed in to your account. To sign out of all of them except the one you are using, press End other sessions.
Your data stays yours
Memory is opt-in and reviewable, sessions are private to you, and you can export or delete your data at any time (see Account & data). Sensitive credentials you provide are stored securely and never shown back in plain text.
A clear record
Account activity and agent actions are logged so there's always an auditable trail of what happened — useful if you ever need to review a task after the fact.
For legal specifics, see the Privacy Policy, Terms, and Subprocessors.