---
title: "Security — Lodge"
url: https://withlodge.com/security
description: "Your own private Lodge, secrets agents never see, and a record of everything that leaves."
---

# Powerful AI. Private by design.

Security. Lodge gives AI room to do real work, inside walls you control. Every company gets its own private Lodge, and nothing leaves it unseen.

## Four promises. Every agent.

### A Lodge of your own.
Your company runs in its own space, with its own database, its own file storage, and its own encryption keys. Nothing is shared with anyone. And if you ever leave, destroying your keys makes your data and every backup unreadable.

### Secrets that stay secret.
Passwords, keys, and tokens stay sealed in your company’s vault. Agents use them to do the work, but never see them. So even a misled agent has nothing to give away.

### Nothing leaves unseen.
Every email, file, and request that leaves your company passes one checkpoint and lands in your audit trail. You choose how strict it is: watch everything, or hold anything risky for a person.

### Only people approve.
Routine work runs. Sensitive actions wait for a person. Anything outside policy is blocked. No agent can give itself access, and no instruction hidden in an email or document can approve anything.

## Every question your security team will ask. Answered.

Security isn’t a feature we added. It’s where we started.

- **Every agent has its own identity.** Agents work through their own accounts. They never borrow an employee’s sign-in.
- **People’s connections stay theirs.** An employee’s mailbox and accounts are used only by them and their Assistant. Admins can see and revoke a connection, but never use it.
- **Untrusted code stays contained.** Anything an agent or app runs works in its own isolated space, far from your company’s records.
- **Encrypted at rest and in transit.** Your data, files, and backups are encrypted with keys that belong to your company alone.
- **Company records stay company records.** Retention, legal hold, and export cover everything done in Lodge. AI never becomes a blind spot.
- **Every action on the record.** See the request, the permission check, the approval, and the result for anything an agent did.

## Held to the standards your company is.

Lodge is GDPR compliant, and we’re working toward SOC 2 Type II, ISO 27001, and HIPAA. Ask us for our security documentation any time.

- **GDPR.** Compliant
- **SOC 2 Type II.** In progress
- **ISO 27001.** In progress
- **HIPAA.** In progress

## Run it where you want.

The same private Lodge, with the same protections, wherever it lives.

- **Managed.** We run it for you, isolated from every other customer.
- **Dedicated.** We still run it for you, on hardware that’s yours alone.
- **Self-hosted.** Your infrastructure. Your keys.

## Bring your security team. We’ll walk them through it.

[Get in touch](https://withlodge.com/contact)