MultiverseAI Logo
    Security

    Security is fundamental, not a feature.

    We implement industry-leading security practices to protect your data and ensure the integrity of our AI platform.

    Report a vulnerability
    security@multiverseai.com
    What we do

    Encryption, isolation and access control on every run.

    Every workflow, agent and API call runs inside the same controls — there is no lighter tier.

    Data protection

    [01]
    • Encryption at rest — All data is encrypted using AES-256 encryption
    • Encryption in transit — TLS 1.3 for all data transmission
    • Per-user credentials — Your own API keys and OAuth tokens run your calls — never shared platform keys
    • Data isolation — Row-level security ensures complete data separation between users

    Access control

    [02]
    • Multi-factor authentication — Support for MFA to secure your account
    • OAuth 2.0 — Secure authentication with Google and other providers
    • Role-based access — Granular permissions for team collaboration
    • Session management — Automatic session expiry and secure token handling
    • 2FA-gated account deletion — Deleting an account requires a second factor before anything is removed

    Infrastructure security

    [03]
    • Cloud infrastructure — Hosted on managed cloud infrastructure (Supabase) with automatic backups
    • DDoS protection — Built-in protection against distributed denial of service attacks
    • Regular backups — Automated daily backups with point-in-time recovery
    • Audit logs — Every workflow and agent run is recorded, with who ran it and what it touched

    AI security & privacy

    [04]
    • Data segregation — Google API data is never sent to third-party AI models
    • No training on your data — Your data is never used to train AI models
    • Prompt isolation — AI prompts and responses are isolated per user
    • Content filtering — Built-in safeguards against harmful content generation

    Compliance

    [05]
    • GDPR compliant — Full compliance with EU data protection regulations
    • CCPA compliant — Compliance with California Consumer Privacy Act
    • Google API Limited Use — Full compliance with Google API Services User Data Policy
    Responsible disclosure

    Found something? Tell us first.

    If you discover a security vulnerability, please report it responsibly. We take every report seriously and investigate promptly.

    Security reporting

    • Email a description of the issue and steps to reproduce it.
    • Give us reasonable time to investigate before disclosing publicly.
    • We will acknowledge the report and keep you updated as we fix it.
    security@multiverseai.com

    [ See also the Privacy Policy ]

    Built on a Secure Foundation

    Ready to build on it?

    Every workflow you run inherits the encryption, isolation, and access controls described above.

    100 free credits to start
    No credit card required
    Cancel anytime