Security

Your business data stays yours

Torchrunner holds client records, email, calls and financial data, so isolation, approvals and an audit trail are built in from the start, not added later.

[ 01 ] At a glance

Three things that are always on

Walled off by organization

Every record belongs to one organization, enforced in the database on every table.

A person approves what matters

Anything that leaves the business, moves money or deletes data waits for a yes, unless you choose to let it run.

Every step written down

Runners keep a run history, and finance changes go to an append-only audit log.

[ 02 ] The details

How it works

Isolation

Tenant isolation is enforced in the database on every table, so one workspace can never read another's data, even through a bug in the application layer.

Access

Every request is authenticated. Permissions are scoped per person, and sensitive operations require signed verification.

Email, phone and connections

Gmail and Microsoft connect through their official APIs with our own connector, not a third-party relay. Calls and texts run on your business line and are logged to the client record. Your clients' QuickBooks connects through Intuit's official app.

Approvals and audit

Archie and Runners draft the work; people approve it. Every automated run records what triggered it, what it checked, what it did and who approved it.

Agent logins

When Archie or a Runner needs to sign in to a website, it goes through runnerID by Torchrunner. Passwords and authenticator secrets are encrypted with a key per identity and typed into the page by runnerID. The model never receives them. Every action is logged, and one switch revokes an agent's access.

About runnerID →
AI and your data

Archie runs on a model provider we choose by default. We do not train AI models on your customer data, and we send content to a model provider only to produce the result you asked for. If you connect your own AI or bring your own API key, that provider processes the requests under your account and its own terms.

Your data stays yours

You can leave whenever you want and take your data with you. Export your CRM records, tasks, activity and meeting notes as a ZIP of CSV files and notes at any time.

You can also set up automatic backups to the storage you already use: SharePoint, OneDrive, Google Drive or Dropbox. Choose daily, weekly or monthly, and a copy of your data lands in your own account on that schedule, so it stays private and portable.

For other data, or to have your data deleted after you leave, write to privacy@torchrunner.ai.

Report a vulnerability

Email support@torchrunner.ai with "security" in the subject, what you found and how to reproduce it. Please give us reasonable time to fix a problem before you share it.

Questions about your data?

Send us your questions about how your data is stored and protected.

Ask us

Send us your security questions and we will answer them.

Privacy policy

What we collect, why, and the choices you have.

Terms of service

The agreement that covers your use of Torchrunner.