Approval first
No agent sends, books or changes anything outside Toimeen on its own. An email becomes a draft in your own mailbox, an invoice an unfinished draft in your accounting program, and only after a person in your company approves it. Toimeen's access to your mailbox does not include the right to send.
- Something arrivesMail, a file, a Telegram message
- An agent preparesReads, checks, drafts
- You approveIn the app or on TelegramWaits for you
- Out to the right placeA draft in your mailbox or your accounting
Every decision on record
Who approved, edited or rejected what, when and from where: the app, Telegram or Raven.
Action log
| Agent | Proposal | Result |
|---|---|---|
| Perintä | Reminder, Ravintola Kivi | Approved |
| Tilaus | Confirmation, Hotelli Aurora | Edited |
| Veloitus | Invoice draft, 4 trips | Waits for you |
| Ostot | Order draft, Tukku Lumme | Rejected |
The facts
Where the data is
On servers in Helsinki, Finland (Hetzner).
Every company kept apart
Each company's data is separated in the database with row-level security, so one company's queries cannot reach another's data.
Passwords and keys
Passwords are stored only as scrypt hashes. Access keys to the services you connect are encrypted with AES-256-GCM using a key kept outside the database.
Signing in
Sign-up needs a confirmed email address. Sign-in attempts are limited. Changing the password signs out your other devices; resetting a forgotten one signs out all of them.
AI and your data
The agents use Claude models from Anthropic through its API. Under Anthropic's commercial terms, data sent through the API is not used to train its models.
Roles and limits
Roles decide who sees and approves what. Above your approval limit only an owner or an admin can approve.
Research on public sources
The research agent reads public pages and registers only, identifies itself as ToimeenBot and respects robots.txt. Research on individual people is off by default.
Keeping and deleting
Your content is kept while your account is active. After you leave you can ask for it for 60 days, and we delete it within 30 days after that.
Who else handles the data
| Provider | Purpose | Where |
|---|---|---|
| Hetzner Online GmbH | Servers, database and file storage | Helsinki, Finland |
| Anthropic | AI models for the agents | United States, Standard Contractual Clauses |
| Postmark (ActiveCampaign) | Email: sign-up codes, reset links, invitations | United States, Standard Contractual Clauses |
The documents
Found a problem?
Write to hello@toimeen.com. We answer security reports first, and we do not take action against people who report in good faith.