Security & trust

Esan is built to act on your behalf — which means trust matters. Here's how you stay protected and in control.

You approve what matters

Anything with real-world effects — sending an email, posting to a connected app, making a payment — asks for your confirmation before it happens. You can run a session more autonomously when you choose to, but the default keeps you in the loop.

Work runs in isolation

Each task runs in its own isolated environment, separate from your other work and from other users. When a task ends, its workspace is torn down.

Access is yours to grant and revoke

• Connected apps are added through each app's own sign-in, with only the access you approve — and you can disconnect anytime.
• Access keys for agent-to-agent use can be revoked instantly, cutting off access on the spot.
• Per-specialist scoping lets you give each agent only the apps and skills its role needs.

Spending is bounded

The wallet can only ever use the balance you've added, within the limits you set, and you can require approval before any payment. Every transaction is recorded.

Your data stays yours

Memory is opt-in and reviewable, sessions are private to you, and you can export or delete your data at any time (see Account & data). Sensitive credentials you provide are stored securely and never shown back in plain text.

A clear record

Account activity and agent actions are logged so there's always an auditable trail of what happened — useful if you ever need to review a task after the fact.

For legal specifics, see the Privacy Policy, Terms, and Subprocessors.