Bototeka is built so that AI handles the routine, while money, irreversible actions, and data remain under your control — at every level: from the database to the confirmation of each step.
Company data is isolated at the database level
Each record is tied to your workspace, and the database itself enforces this (PostgreSQL Row-Level Security). Even if there is a code error, others' data will not appear in responses — isolation works on a deny-by-default principle. Connection secrets are never shown in plain text.
AI suggests — you approve
AI prepares the result, but anything that moves money or is irreversible requires human approval. This is embedded in the execution environment, not just the UI: financial and irreversible actions cannot be run autonomously, and autonomous mode is only available where you explicitly allow it.
AI only acts by the rules
No arbitrary calls: AI works through a registered, typed catalog of tools and actions, and a tool must be enabled for your company.
Each input is validated against a schema before the action
Connection secrets are encrypted (AES-256-GCM) and never displayed
External connections cannot reach the internal network
All significant actions are recorded in an immutable audit log
Your data, your control
You manage consents, can request data export or deletion, and retention periods are configurable. Access by our employees to your workspace requires second-person approval and has an expiration. How we process personal data is detailed in the Personal Data Processing Policy. For security matters, write to the address below.