Every task in isolation
Each request runs in a fresh, isolated environment of its own, separate from every other customer’s work and from ours. When the task is done, the environment is shut down.
Your credentials stay protected
Passwords, API keys and the credentials for the tools you connect are encrypted at rest and never shown to the AI. Doozy uses them on your behalf without handing them over. A secret you save can be replaced or deleted, but never read back, by anyone.
You decide what it can reach
- Doozy can use only the tools your workspace has connected.
- Tools that delete or overwrite start switched off, and you can switch off any other.
- On GitHub, Doozy works on its own branches and opens pull requests. It cannot merge them, push to your main branch, or touch repositories you have not enabled.
Private stays private
In a private channel or a direct message, Doozy reads the conversation only on behalf of someone who is part of it, and it does not learn from private places unless asked to there. The web app shows that someone asked Doozy for something in a private place, never what was asked.
Every action on record
Doozy tells you in the thread what it did. Sign-ins, setting changes and the use of saved secrets are written to an activity record that cannot be edited.
Access and roles
- Owners and admins manage setup, connections, secrets and members. Members use Doozy.
- Only owners can change billing.
- Sign-in is by emailed link or Google. There are no passwords to leak.
Protecting your data
- All traffic to and from Doozy is encrypted in transit.
- Each customer’s data is kept apart from every other customer’s.
- Access to production systems is limited to the people who need it.
- Your work is never used to train AI models. See AI & Data Use.
Our providers
The companies that help us run Doozy, and what each one does, are listed on our sub-processors page.
Reporting a vulnerability
If you believe you have found a security issue in Doozy, please write to hello@askdoozy.com with the details and the steps to reproduce it. We will acknowledge your report, keep you informed, and credit you if you wish. Please give us reasonable time to fix the issue before disclosing it, and do not access or change other customers’ data while testing.