Security

People stay in control of what ships

Approvals on every change, roles and two-factor sign-in, data scoped to your workspace, and signed contracts anyone can verify.

Approvals

The agent asks before it acts

Xoria's rule is that AI never does untracked work. Anything that reaches a customer or changes a record waits for a person.

Every change waits
Sending, posting, creating or updating anything in a connected app needs an approval. Auto mode does not change that.
Private reads ask too
In Ask for approval, Xoria asks before reading a private source like your inbox or CRM.
Bound to one action
An approval covers the exact action shown, with its exact contents. It cannot be reused for a different one.
It expires
An approval that is not used runs out, and has to be asked for again.
Plays
Each play has a named approver. Gated steps pause until that person approves them.
Agents
A hired agent starts paused with no permissions. Only the permissions you grant authorize actions.

Access

Who can get in, and what they can do

Sign-in, roles and the features each person sees are set per workspace.

Roles
Owner, admin, manager, member and guest. Owners and admins manage the workspace and its billing.
Two-factor sign-in
Each person can add an authenticator app as a second factor, and it is asked for at sign-in.
Single sign-on
SAML single sign-on is available. The Xoria team sets it up with you for your email domains.
Invitations
People join by an email invitation or a single-use link.
Money stays with the owner
Only the workspace owner connects the Stripe account that takes card payments.

Data

Your workspace's data stays in your workspace

Access is enforced in the database, on every row, by workspace membership.

Workspace isolation
Row-level security in the database scopes clients, work, money and messages to the members of the workspace they belong to.
Encryption
Your data is encrypted in transit and at rest.
Messages
Message content is encrypted before it is stored, with a key per conversation.
Memory
What Xoria learns from your mailbox and your chats is private to you. Mailbox learning starts only after you consent.
Drive
A file you upload is private to you until you share it.
Deleting
You can delete your account, and an owner can delete a workspace.

Records

What happened, written down

Runs, approvals and agent actions keep their own record, so there is always something to check.

Play runs
Each run keeps its steps, what waited for approval, what it produced and Xoria's report.
Agents
Every action an agent took is in its audit log, with filters and a CSV export.
Contracts
Every change to a contract, its signers and its evidence is chained, and the chain is timestamped by an independent authority.
Outreach
Unsubscribes and bounces are suppressed for every campaign, and Do not contact is respected.

E-signature · Beta

Evidence that does not depend on trusting us

A contract signed through Xoria is sealed, timestamped by an independent authority and held in write-once storage. Anyone can check it on a public page, or with standard tools.

Identity
The signer confirms their email with a one-time code and agrees to sign electronically before signing.
Fingerprint
A SHA-256 fingerprint identifies the exact PDF. It is registered and timestamped when the contract is sent.
Seal
The last signature seals the PDF with a key held in a hardware security module.
Archive
A copy of the sealed PDF is held in write-once storage.
Verify
A public page checks a signed PDF, or an envelope id and fingerprint, with no account. The uploaded file is checked and discarded.
Limits, stated
Xoria could create a new, forged document today. It could not backdate it into the anchored history, and it could not make it match the copies emailed to every party.
Status
E-signature is in beta. It was designed for use in the United States first, and a legal review comes before general availability.

A question this page does not answer? Write to support@xoria.co or contact the team.

Works across the tools your team already uses

Xoria's agent executes across your stack: it drafts the recap, updates the record and files the tasks, with every step logged as it happens.

Ask Xoria

AI that never does untracked work.

Asks first

Nothing customer-facing ships without a named human's approval. Approvals are single-use and bound to the exact action.

Every run lands as visible work

Every run lands as tasks the whole team can see, and every action lands in the audit trail as real, visible work.

Close the follow-through gap.

Xoria is in private beta. Join the waitlist — and if you want to shape the first plays with us, say so when we email you: we're onboarding a small group of design partners now.

Or book a demo