Security

How WarTable protects your business data

What's in place today: where your data lives, who can reach it, and how AI features use it. We update this page as we add protections.

Is it safe to give WarTable access to your business data?

It's a fair question, because WarTable works with your tools, files and numbers. Here's exactly what happens to that data: where it's stored, how sign-in and connected apps work, what goes to AI providers, and which companies help us run the service. If anything here is unclear, ask us.

Where your data lives

WarTable runs on Google Cloud in the United States (us-central1). The app, the database and your files are all hosted there, and all traffic to WarTable is encrypted with HTTPS.

Signing in

Sign-in is handled by a dedicated authentication provider, with email and password, Google or Microsoft. WarTable never stores your password. Sessions use secure cookies, and signing out ends your session.

Connected apps

Apps connect through an integration platform that holds their login tokens. You choose which actions WarTable's agents can use for each app, and you can disconnect an app at any time.

Extra encryption for sensitive details

Credentials for custom connectors, and sensitive travel details such as passport and loyalty numbers, get an extra layer of encryption (AES-256-GCM) on top of encrypted storage.

Your files

Documents and files in your workspace are private. They open through short-lived signed links, never through public addresses.

Approving changes

When the assistant proposes a change inside WarTable, such as a note, a trip, a routine or a workflow, it waits for you to approve it before anything is saved.

Payments

Payments are processed by Stripe. Card details go straight to Stripe, so WarTable never sees your card number.

AI features

To answer you, AI features send the content they work on (your question, relevant files and knowledge, and results from connected apps) through OpenRouter to leading model providers such as Anthropic, OpenAI and Google. WarTable doesn't use your content to train AI models.

Companies that process customer data

These providers (subprocessors) handle data on our behalf to run WarTable. For a current list with every provider named, email privacy@wartable.ai.

ProviderWhat it does
Google CloudHosting, database, file storage and logs
OpenRouterRoutes AI requests to model providers
AI model providers (via OpenRouter)Generate answers, e.g. Anthropic, OpenAI, Google
StripeSubscriptions and payments
Authentication providerSign-in and account emails
Integration platformConnects your apps and holds their login tokens
Infrastructure providersKnowledge-base search, the assistant's long-term memory, and secure sandboxes for running code
Voice platformVoice and phone agents
Team messaging providerDelivers in-app feedback to our team

On this website

ProviderWhat it does
GoHighLevelWebsite forms, booking and chat
Google AnalyticsWebsite analytics (only with consent where required)
Hosting providerHosts this website

Questions, or found a vulnerability?

Email support@wartable.ai with “Security” in the subject. If you think you've found a security issue, please tell us before sharing it publicly, and we'll work with you to fix it.

Last updated September 24, 2026.