Security & data
Your business data stays yours.
archie is built so that running your store, tracking your orders and seeing your dashboards never requires trusting someone else's server with your raw data.
Encrypted on your own machine
Your core database is a single encrypted file (AES-256) on your own computer. The encryption key is held by your operating system's own secure credential store, not by archie's servers. There is no central copy of your database for a server breach to leak.
Standard sign-in for your mailbox
Gmail and Outlook connect through each provider's own sign-in page (OAuth with PKCE), the same flow as any major app. archie never sees or stores your Google or Microsoft password, and no provider secret is shipped inside the app. If you use another provider over IMAP and SMTP, that password is kept only in your encrypted local database.
The Hub: isolated per business
The AI features run through a dedicated service called the Hub. Each business has its own tone profile, knowledge base and case history there, encrypted per business and isolated from every other. Data travels to the Hub encrypted in transit and is encrypted in its database.
The AI is yours, not shared
Drafts are composed from your own context: your tone, your policies, your past replies. The Hub is a company-intelligence layer for your business, not an anonymous, stateless wrapper around a generic model.
You approve everything
An AI-written reply is a draft until you approve it. An AI-read invoice or estimate is a draft until you have reviewed and corrected it. archie does not send mail or write records on its own.
Works offline, never locks you out
Dashboards, orders, tickets and the action list work without any connection. If a subscription lapses or an allowance runs out, nothing is deleted or locked.
Engineering
Built to be dependable.
- Every integration (storefront, courier, ad platform, mailbox) is built against one strict, shared contract with its own connection test.
- A large automated test suite, with thousands of tests, has to pass before changes ship.
- Background sync is resumable: a full import of years of orders picks up exactly where it stopped after an interruption.
- Site scanning includes protection against being tricked into fetching internal addresses.
- The Hub's database is backed up nightly.
Be clear-eyed
What we are still doing.
archie is in early access. Some things are not finished, and we would rather say so:
- The Hub currently runs on a single machine, without managed hosting or high availability. Production hosting is in progress.
- “Connect with Google” is available to approved testers while Google completes its formal app review.
- The installers are not yet code-signed, so Windows (or macOS) may warn you when you first run archie.
Security FAQ
Who can read my customers' emails?
Your mail is fetched to your own computer. To write a draft, the text of a message and the context needed to answer it are sent to the Hub, where they are encrypted and tied to your business only. The people who run the Hub have administrative tools for operating the service, and a formal data-access policy will be published here before launch.
Is one business's data mixed into another's drafts?
No. Tone, knowledge and case history are stored against your business and used only to draft your replies. We do not blend one business's profile into another's.
What if I stop using archie?
Your data is a file on your computer, so it stays with you. You can also ask us to delete what the Hub holds for your business. See the privacy page.
I found a security problem.
Please tell us at hello@archiehq.co with the details. We will respond promptly.