---
title: "Aldena security: isolated projects, encrypted keys and approvals"
description: "How Aldena isolates each project's sandbox, stores provider keys and connector tokens encrypted, and puts per-tool permissions and approvals between agents and your systems."
url: "https://aldena.ai/security"
---

# How Aldena keeps your team's work contained

Each section below describes how the product works today. If your review needs more than this page covers, sales can take you through it.

## Isolation

- Each project has its own sandbox on the sandbox provider your team connects (Boat today, on machines in the EU), under your team's own agreement with that provider.
- A project's agents reach only that project's sandbox, connections, environment variables and memory. No tool reads another project's.

## Credentials

- AI provider keys, project environment variables and connector tokens are stored encrypted.
- When Claude Code or Codex runs on a shared team key, the runner's local proxy adds the key to inference requests only, so the key never enters the CLI's environment.
- Claude Code and Codex plan logins happen inside the project's sandbox and never pass through Aldena.

## Control

- Every tool has a permission: ask, allow or deny. Set the concierge's in Account → Permissions, and each project's agents' in that project's settings.
- Mutating actions, such as a connector write, wait for a person's approval by default: allow once, allow always, or deny.
- The concierge's mutating tools ask before they act by default.

## Platform

- Aldena serves every page and API over HTTPS, so traffic is encrypted in transit.
- Aldena runs on Cloudflare Workers, with its database on Cloudflare D1.
- Cloudflare Turnstile guards sign-up, password reset and the Contact sales form against bots.
- Rate limits apply to sign-in and to public endpoints.
- Requests between Aldena and the runner in each sandbox are signed, and so are the runner's replies.
- The database can be restored to any point in the last 30 days.

## Privacy and processors

What data Aldena collects, which processors handle it, and how long it is kept are set out in the [privacy policy](https://aldena.ai/privacy).

## Reporting a vulnerability

Email what you found and how to reproduce it to support@aldena.ai.

## Need a security review?

Send sales your questionnaire or architecture questions, and they'll go through them with you.

- [Contact sales](https://aldena.ai/contact-sales)