DATAStays where you run it
Prompts, files, task history and memory are stored in your Postgres database and object storage. With a self-hosted deployment, we never receive them.
■ Security and trust
Built so your data
never has to leave.
Berry is designed to run inside your boundary. Here is how data moves, who can see it and what is recorded.
DATA
MODELSOnly providers you approve
Model requests go only to providers on your allow-list, under your agreements with them. Keys stay on your server as secret references. You can run open models on your own hardware.
EXECUTIONIsolated by default
The agent runs code in a sandbox per task, separate from Berry's services, with network egress blocked, allow-listed or open by policy, and approvals for shell commands and file changes.
[ 01 / 02 ] · Controls
Controls in the product.
- Tenant isolation. Row-level security is enabled and forced on every tenant table in Postgres, and Berry's services connect with least-privilege database roles.
- Identity. Google Workspace single sign-on with domain restrictions, SCIM 2.0 provisioning for users and groups, email and password with domain allow-lists, and session revocation.
- Access. 44 fine-grained permissions behind editable roles, departments, resource access rules, feature flags and service accounts with scoped, expiring tokens.
- Models. Allow and block rules per organization, department or person, with organization defaults.
- Spend. Daily and monthly allowances in dollars, requests, tokens and sandbox minutes, checked before each request.
- Audit. Sign-ins, administrative changes, approvals, phone pairings and reported responses are recorded and can be exported as JSON or CSV.
- Secrets. Connector tokens are encrypted with AES-GCM under a dedicated key that supports rotation. Traffic is encrypted in transit with TLS; storage encryption follows your database and storage configuration.
- Mobile. Phones sign in with a single-use code approved from the web. Device sessions live in the iOS Keychain or Android Keystore and can be revoked by the person or an administrator.
[ 02 / 02 ] · Disclosure
Report a vulnerability.
If you believe you have found a security issue in Berry, email [email protected] with the steps to reproduce it. We acknowledge reports within three business days and ask for reasonable time to fix an issue before disclosure. Please don't access data that isn't yours or disrupt others' use of the service.