Security & Privacy
How Agent Hero keeps work safe
The boundaries your agents work inside, and where they stop.
Where agents work
Your agents work in a private, isolated cloud computer of your own. Every agent you chat with, shared ones included, uses it. It separates you from other people, not your agents from each other.
It has no open internet access. It reaches only the public Python and JavaScript package libraries and Agent Hero, which carries the AI model, your documents, connectors and web search.
Web search is on by default, so an agent may search unasked. Each search shows in the tool-call trail.
What asks first
Each person sets a permission mode for their own chats, starting on Auto-accept edits.
| Mode | Shows an approval card for |
|---|---|
| Auto-accept edits | Connected-system calls, skill changes, schedules, Telegram sends to a named chat |
| Ask each time | Everything except reading documents and the agent's files. Web searches ask too. |
| Bypass all | Skill changes and Telegram sends to a named chat. Agent questions still wait. |
Connected-system cards cover reads too. In every mode, each action shows in chat.
Who can see what
Organisations are walled off. Outsiders see into yours only as an added member or guest. Inside it, you see your own agents, the global agents, and what was shared with you. Search follows the same rules.
Chats are private per person, even on shared agents. The agent's owner doesn't see your conversation.
Connections act as the account that signed in. Anyone you share a connected agent with at Editor or Full can use that connection, as Connectors explains.
Agent Hero staff can open your organisation in support mode. Data privacy says what they see.
Your credentials
Xero, Outlook, OneDrive and Google Workspace sign in on the provider's own page. Agent Hero holds the access you approved, never your password. Browser Use and Plato (Read Only) take an API key or token, which Agent Hero stores to run the connection. Disconnect in the app or revoke access at the provider.
Signing in
Manage your password, two-step verification and signed-in devices in Settings → Security.
Agent Hero staff can set organisation rules: sign out when the browser closes, sign out after inactivity, or require two-step verification. Ask your contact. The browser enforces them to protect a shared or unattended computer.
Spending limits
AI spend is prepaid, so the balance your admin loaded is the hard ceiling. Per-member limits are optional, and each turn has its own cost limit.
There is no automatic top-up. When credits or a limit run out, the turn stops and saved work is kept. Purchased credits expire 365 days after purchase. See Billing.