Security
Last updated: September 8, 2026
ClevAgent adds guidance and safeguards to agent work inside its workspace. These protections have limits and cannot catch every risk.
Your workspace and data
Your agent workspace runs on your Mac. Account services and some agent activity are processed online. Our Privacy Policy explains what may leave your device, which providers receive it, and how to request access or deletion.
Account protection
Public clevagent.io connections use HTTPS. Passwords are stored as hashes, and password resets use email links. You can also sign in with Google.
Protected session cookies and request checks help prevent unauthorized account actions. Project access is limited to owners and invited members according to their roles.
Payment protection
Stripe processes payments. ClevAgent does not store your card numbers.
Report a vulnerability
If you find a security issue, email [email protected] with the affected feature and steps to reproduce it. We will respond within 2 business days. Please do not include passwords, access keys or private workspace content.