Security in plain facts

Access comes from membership

Seben takes who you are from a validated sign-in token, and what you can open from your workspace memberships.

Documents in other workspaces are not visible to you. Automated isolation tests check that boundary.

Sign-in

Sign in with Microsoft 365 or with email.

Encrypted in transit

app.seben.io and api.seben.io accept only TLS 1.2 or newer.

Both send HSTS, telling browsers to connect over HTTPS only, and so does this website, www.seben.io.

Where documents are stored

Documents are stored on Microsoft Azure in the United States.

AI processing

Seben's AI models all run on Microsoft Azure. GPT-5.4 mini, the default, and GPT-5.6 Terra are OpenAI models that Microsoft hosts through Azure OpenAI in Microsoft Foundry. Claude Sonnet 5 is Anthropic's model, which Anthropic operates on Azure in the United States.

Under Microsoft's terms, what Seben sends the GPT models is not available to OpenAI or to other Microsoft customers, and it is not used to train generative AI foundation models or to improve Microsoft's or others' products without Aqili's permission, which Aqili has not given. Under Anthropic's terms, Anthropic may not train models on what Seben sends. Aqili does not train AI models on your documents either.

GPT-5.4 mini is processed in Microsoft's United States data zone, and Claude Sonnet 5 in Azure in the United States. GPT-5.6 Terra may be processed in any Azure region where it runs, while what Microsoft stores stays in the United States.

Microsoft checks the GPT models' prompts and outputs automatically for abuse, and content it flags can be stored in the United States for review by authorized Microsoft employees. Anthropic's safety systems check Claude's prompts and outputs; only usage information and content they flag leave Azure for Anthropic, which can keep flagged content for up to two years.

The agent asks first

In Ask mode, the default, the agent asks before destructive actions such as deleting pages or redacting.

It always asks before calling an outside tool, in either mode.

Redaction and versions

Redaction removes page text and images under the box and checks the result by re-extracting text.

Earlier versions keep the original and can be restored by workspace members; download the redacted version to share.

Certificate signing keys

Certificate digital signatures are available for workspaces Aqili sets up. To set this up for your workspace, write to [email protected].

Certificate signing keys are held in Azure Key Vault and never exported, and each workspace signs only with its own key.

Signed desktop apps

The Mac app is signed by Aqili, Inc. and notarized by Apple. The Windows installer is code-signed by Aqili, Inc.

Every published build is verified before it reaches the update feed.

API keys are hashed

Workspace API keys are stored as salted hashes.

This website

www.seben.io sets no cookies and loads no trackers or third-party scripts.