Security and data
How Flieber handles your data
Your data stays yours. Here is where it lives, who can access it and how AI models use it.
- Ownership
- Your data stays yours and is never sold or shared.
- Hosting
- Amazon Web Services (AWS), US region.
- Encryption in transit
- HTTPS only, with TLS 1.2 or higher, for all external traffic and for internal database and cache connections.
- Encryption at rest
- AES-256 through AWS KMS for all customer data, including databases, backups, cache and file storage.
- Marketplace connections
- When you connect Amazon or Shopify, you authorize access through OAuth: Flieber never sees your marketplace passwords, only the access tokens you grant, which you can revoke at any time. Those tokens are encrypted with a dedicated AWS KMS key and stored in AWS Secrets Manager, isolated from the rest of the platform.
- Passwords and secrets
- Sign-in is handled by Clerk, so Flieber stores no user passwords. API tokens are stored only as hashes, and application secrets are kept in AWS Secrets Manager, never in code.
- AI agents and Flieber CLI
- With Flieber CLI, you sign in once and the sign-in is stored on your computer in a file only you can read, so you never paste a key or token into a chat, and local MCP settings hold no secret. Flieber reads only what your sign-in or API key allows; an API key reads one organization, limited to the data you grant. Every change an agent makes is previewed first and applied only after you confirm.
- Access
- Two roles: Admin, with access to admin tools, and Member, with access to operational tools only. Single sign-on with Google and Microsoft.
- AI models
- Flieber uses models from several providers, including Anthropic, OpenAI and xAI. Calculations run inside Flieber; data reaches a language model only when a request requires it. Flieber does not use customer data to train models, and its AI providers are set up not to use it for training.
- Changes to your systems
- Every change Flieber makes to your systems follows approval rules you set; by default, every change requires approval.
- Retention and deletion
- As set out in our Privacy Policy and Service Agreement.
Questions about security? Email hello@flieber.com.