Security and Trust
Security and Trust is the section that answers the questions a security-aware buyer asks before turning anything on, from isolation to the audit trail. It covers the trust boundary between the AI and your servers, tenant isolation between hosting companies and between customers, what Panelbot stores and what it deliberately never logs, encryption of stored credentials, the audit trail of every diagnostic and action, and the compliance stance: GDPR roles, DPAs, subprocessors, data location, retention, and whether we train models on your data. We do not. This section is written for the person who has to justify Panelbot to a compliance officer or write it up in an internal risk review. It stays factual: what the design guarantees, what is verified in code rather than left to the AI's judgment, and where the honest limits are.
What this section covers
- Security overview
How Panelbot protects your servers and customers: a scoped panel credential, no agent by default, allow-listed actions, ownership checked in code.
- Data handling and privacy
What Panelbot stores and what it never logs: encrypted credentials, careful handling of chat content, and your right to export or delete data.
- Permission tiers explained
The three ways Panelbot can connect to a server, and how it grades actions by impact: read-only checks, opt-in fixes, human-approved changes, and a class it never touches.
- What the agent can and cannot do
Full disclosure on the optional Panelbot agent: what it runs, what it cannot run even if Panelbot were compromised, how updates and removal work.
- With and without the agent
Capability by capability: what Panelbot does with the limited panel credential alone, what needs full server access through the agent, and what is agent only.
- Tenant isolation
Every hosting company on Panelbot, and all of their customers, is strictly separated. One company's credential can never be used for another's work.
- Audit trail and accountability
Every diagnostic, change, and approval on your account is recorded in a trail you can review and export, including declined actions. It cannot be edited or deleted through the product.
- Compliance and data questions
GDPR roles, DPAs, subprocessors, where Panelbot data lives, retention windows, and whether we train AI models on your data. We do not.
Common questions
Is my customers' data isolated from other hosts?
Yes. Every hosting company on Panelbot, and each of their customers, is strictly separated. An agent on one company's server cannot receive another company's instructions.
Do you train AI models on my data?
No. Your customer conversations and account data are not used to train models. This is stated in our Terms and Privacy Policy, not just on a marketing page.
Is there an audit trail?
Yes. Every diagnostic, action, approval, and refusal is recorded in a trail on your account that cannot be edited or deleted through the product. Entries are kept for 12 months, and you can review and export them.
Where does the data live?
Panelbot data is hosted in United States datacenters. Chat text sent to language model providers is processed on their infrastructure, which may be outside the United States. Retention windows and subprocessors are documented on the compliance page.
Start here