Security

Security is built into ZEUS, not bolted on.

How we protect you

• Per-user isolation: every query is scoped to your account; no user can read another's memory, mail, calendar, workflows, or tokens.
• Encryption at rest: memory, Google tokens, and voice transcripts are AES-GCM encrypted.
• Approval gates: sending email or creating calendar events always requires your explicit approval - server-enforced, not just UI.
• Rate limiting: per-user and per-IP limits on sensitive endpoints prevent abuse and runaway cost.
• Sandboxed outside agents: untrusted code runs in an opaque-origin iframe + Web Worker with no network and a CPU/time cap.
• Spend cap: a per-user monthly premium allowance prevents any single account from running up cost.
• Least-privilege Google scopes and write-only API secrets.

Reporting

Found an issue? Email support@zeusos.us - we read every report.

Last updated: June 27, 2026. Questions? support@zeusos.us.