Skip to main content

Security

Authentication​

  • You authenticate through your provider's own OAuth login and consent — AI Gurus Group never sees or handles your accounting password.
  • Your AI assistant authenticates to the gateway using the standard connector authorisation flow. Access is scoped and time-limited.

Credential handling​

  • Your provider tokens are stored encrypted (AES-256-GCM) in UK-hosted Azure Key Vault, per user and per company.
  • Tokens are refreshed automatically and safely; expired or revoked access fails clearly and prompts you to reconnect, rather than failing silently.
  • No credential or token value ever appears in logs. Logs contain metadata only (timestamps, operation names, status codes).

Isolation​

  • Each connection runs in its own isolated session, bound to one user and one company. There is no shared state between connections.

You stay in control​

  • You authorise exactly one company/organisation per connection.
  • You can disconnect at any time from your provider's connected-apps settings; access is revoked immediately.

See also Data & residency and Read-only access.