Security and data protection
Joshu is an AI executive assistant that connects to your email, calendar, and business tools. This page summarizes how we isolate your data and what you control.
Isolated desk per customer
Each Joshu runs in its own sandboxed cloud computer in the United States. Your files and Joshu's memory are stored there and are not shared with other customers. To do its work, Joshu sends parts of your content to the providers on the subprocessors page, e.g., AI model providers to write a reply, Nylas for its mailbox, and Twilio for calls and texts.
OAuth and connectors
You choose which apps Joshu may access (Gmail, Slack, Salesforce, and others). Permissions follow each vendor’s OAuth flow. You can revoke access anytime from the provider or from Joshu’s desktop.
Data use
We do not use your content to train AI models, ours or anyone else's. When you cancel, we delete your box and your data. For the most privacy, you can self-host Joshu on your own computer. See the privacy policy for retention and US hosting details, and the subprocessors page for the providers we use.
Reporting issues
Email [email protected] with “Security” in the subject line. We appreciate responsible disclosure.