Security
Your agent knows a lot about you. Here’s how we keep it safe.
Every agent runs alone in its own sandbox, on servers in Belgium, with your keys in an encrypted vault. Here is what protects it, what we can see and what you control.
Its own sandboxNo agent can reach another
Keys in a vaultEncrypted, given only to the agents you pick
We never train on itAnd we never sell it
Hosted in BelgiumGoogle Cloud, europe-west1
How it’s built
Walled in, layer by layer.
Each wall stands on its own, so one that fails still leaves the others.
- Google Cloud, in BelgiumEverything is encrypted at rest. Databases and backups use keys we hold in Cloud KMS.
- A private networkAgents reach the public web, never our internal network or the cloud’s metadata server.
- A space of its ownIts own namespace, identity and network rules. Other agents can’t connect to it.
- A sandboxed kernelgVisor stands between the agent’s code and the server, so code it runs stays inside.
Your agent
Your data
What we see, and what we leave alone.
We see
- Its settings: name, model and chat apps
- Whether it’s online and healthy
- What AI it used, and what that cost
- Your account and your bills
We don’t look at
- Your chats in WhatsApp, Telegram and the other apps
- Your contacts
- Your AI provider’s account
- What your connected apps hold
Dashboard chats are stored so you can read your history and export it. We open an agent’s storage or chats only with your written OK on a support ticket, and Google Cloud keeps a 400-day record each time a person opens an agent’s container or reads its secrets or logs.
Your controls
You hold the keys.
Who can message it
Only the people you allow, in every chat app.
Which apps it may use
Each agent gets only the apps you grant. Their logins stay in our vault.
Which sites it may open
Block any website, or allow a short list only. A guide for its browser, not a security wall.
Two-step sign-in
A code from your phone protects your Diali account.
A lock on our team
With the staff lock on, our admin tools can’t change or restart your agents unless we give an emergency reason, which you’re shown.
Leave with your data
Export your dashboard chats and its memory. Close your account and everything it ran is deleted.
Every day
Looked after, so you don’t have to.
Updates tested first
Each release runs on our own agents before we offer it to you, and you pick when to install it.
Skills checked at the door
Known-malicious skills are refused, and each one shows its security review where one exists.
Backups you can restore
A snapshot every day, kept 30 days, restored in one click. An add-on, included on Max.
Honest limits
What we don’t promise.
Your agent reads your messages
To answer, it sends them to the AI model you picked: your own provider, or Diali AI through a routing service. Diali doesn’t read them or train on them.
It pauses to restart
Each agent runs as one copy, so it’s offline for a moment when it restarts for an update or maintenance.
Not everything stays in Belgium
Payments, analytics, email and Diali AI use partners outside the EU, as our privacy policy lists. A cloud computer runs on AWS in Ireland.
Questions
Questions about your data.
We don’t read them, and we never train AI on them. Chats in WhatsApp, Telegram and the other apps stay in your agent’s own workspace. Your dashboard chats, automation results and backups are stored so you can read, export and restore them. To answer you, your agent sends each message to the AI model you picked.
In Google Secret Manager, encrypted at rest and given only to the agent you choose. On Diali AI, your agent holds only a key we can revoke, never the provider’s own. Remove your key from your vault any time.
No. Diali never trains AI on your data and never sells it. The model that answers your agent follows its own provider’s terms: on your own key, the terms you signed up to.
Cancel, and your agent keeps running until the end of the period you paid for. Close your account, and every agent it ran is deleted with its storage and its secrets.
Yes. It reaches the public web to browse, search and use the tools you turn on, but never our internal network, the cloud’s metadata server or another customer’s agent. You can block sites, or allow a short list only.
Code runs in your agent’s own gVisor sandbox, a second kernel between it and the server it shares with other agents. Each agent also has its own space on the cluster, so nothing it runs can reach another customer’s agent.
Your agents, their browsers and desktops, and our database run on Google Cloud in Belgium. A cloud computer runs on AWS in Ireland. API keys sit in Google Secret Manager, which may keep copies in regions outside the EU. Payments, analytics, email and Diali AI use partners outside the EU, as our privacy policy lists.
Safe by design.Yours to control.
Set it up in minutes, and change who and what it can reach any time.
Start free trial7 days free on Starter, then $29.99/monthCard at checkout, $0 todayReminder 3 days before you payCancel anytime