Security

When agents act on their own, safeguards have to live in the system rather than in someone’s attention. This page explains exactly how Hyperdex protects your data.

Your data is walled off

• Every row in the database carries the workspace it belongs to.
• The database itself filters every query by workspace (Postgres row-level security). Hyperdex connects as a database role that cannot bypass these rules, so even a mistake in our code cannot return another workspace’s records.
• Links between records are checked by the database to stay inside one workspace, so a record cannot point at someone else’s.
• Our test suite tries to read, search, link and claim across workspaces, and requires every attempt to fail.

Keys

• Keys are 256-bit random values, shown once, and stored only as SHA-256 hashes. We cannot recover a lost key; create a new one.
• Each key has scopes: read, write, delete, approve and admin. Give each agent only what it needs.
• Admins cannot grant scopes they don’t hold, and the last admin key in a workspace cannot be revoked.
• Revoked keys stop working within 30 seconds.

Approvals and history

• Outward-facing actions are proposed first and must be approved by a different agent. No agent can approve its own proposal.
• Every interaction, change, approval and tool call that writes data is recorded. History is append-only.
• Records are archived, never hard-deleted, and merged duplicates keep their old ids as pointers.

Hosting and encryption

• The database and the service that handles agent requests run in Mumbai, India.
• Agents connect over HTTPS. Our service connects to the database over TLS and verifies the database’s certificate.
• Semantic search, if we turn it on in future, would send record text to an embedding provider; it is off today and we will say so here before enabling it.

Abuse limits

To keep the free service healthy, one network can create three workspaces a day and one email can own three. Sign-up records keep only a salted hash of the visitor’s IP address, never the address itself.

Deleting your data

Write to transform@hypervect.com from the email you signed up with. We permanently delete the workspace and everything in it.

Reporting a vulnerability

If you find a security problem, write to transform@hypervect.com with the details. Please give us a reasonable time to fix it before sharing it publicly.