Extent platform security
Your bots read your mail, use your apps and keep a memory of your life. Here is how Extent protects that data, and what we can and can't see.
Where your data lives
Extent runs on Cloudflare in the EU. Your account, bots, messages and memory are encrypted at rest, and every connection to Extent uses TLS.
Each bot has its own cloud computer for browsing, files and code. It holds what that bot works on, and nothing from your other accounts.
Sign-ins stay sealed
When you connect your Claude or ChatGPT plan, or an app such as Gmail or GitHub, Extent seals the sign-in with AES-256-GCM. The key is kept as an encrypted Cloudflare secret, apart from the database, and each sealed sign-in is bound to your account and that app, so it can't be read out under anyone else's.
- No model and no cloud computer ever sees a sign-in. When a bot calls an app, Extent makes the call and returns only the result.
- Tests check that sign-ins never appear in API responses or logs.
- Signing in to your AI plan runs in a short-lived container, destroyed when the sign-in ends.
- Removing a plan or disconnecting an app deletes its sign-in at once, and revokes it at the app where the app supports that.
Bots ask before they act
A bot reads on its own, but sending an email, opening a pull request, paying or changing anything in your apps waits for your tap. You can tell a bot it can always use a given tool, and take that back in the app.
Mail, web pages and files a bot reads are handled as data, never as instructions to follow.
Connected agents
When you connect Claude Code, Codex or another agent to Extent over MCP, it gets only the permissions you grant. We store hashes of its tokens, so we can't read them back. Revoking an agent in Settings ends its access at once.
A record of every call
Every call a bot or connected agent makes to one of your apps gets a record: which bot or agent, which app and tool, when, and whether it worked. The record leaves out the content, so it doesn't copy your data.
What we see
To debug and measure bots, we keep traces of their turns in Langfuse, in its EU region. Before a trace leaves Extent, what Gmail and Calendar sent and returned is replaced with a size summary. We use standard error monitoring to catch crashes.
The apps send product analytics to PostHog in the EU: which screens you open and what you do, never the content of your messages or memory. Turn it off in the app under Settings, then Account. This site loads analytics only after you accept cookies.
We don't sell your data, show ads, or use your data to train AI models.
Deleting your data
Delete your account in the app under Settings, then Account. You're signed out everywhere at once, and Extent deletes your bots, conversations, memory, computers and sign-ins. The privacy policy lists what we keep, for how long and who processes it.
Found a security problem? Email hello@extent.sh.