Security

Your workspace is isolated, governed, and auditable by design.

Isolation

Each customer gets a dedicated workspace. Model traffic is routed through a governed AI gateway with budgets, audit logging, and per-person controls — so the business owns and oversees how AI is used.

Authentication

Sign-in uses your existing Google or Microsoft work account. Two-factor is inherited from your identity provider; ShellWave never stores passwords.

Reporting an issue

Found a vulnerability? Email security@shellwave.org.