Skip to main content
Glass shield protecting an app window
Aura is built on a small set of carefully chosen infrastructure providers. Each one handles one job, each one is an industry leader at that job, and your data is never sold or shared beyond what’s needed to run the service.

​
How your data is protected

Layers of glass protection around a chat bubble
  • Zero data retention on chat. Chat routes use zero data retention (ZDR): AI providers process your request and keep nothing, and nothing is used to train models. Optional features without ZDR — like Fast Mode and some video and music generation — are clearly labeled and only run when you choose them. See Privacy.
  • Encryption in transit and at rest. All traffic between your device and Aura is encrypted with HTTPS/TLS, and stored data — files, knowledge base content, app data — is encrypted at rest.
  • Gated media links. Shared images, videos and files go through short-lived, gated links — never permanent public URLs.
  • Your account is yours. Sign in with Apple or an email sign-in link. There are no passwords to leak, and you can disconnect any connected app at any time.

​
The providers behind Aura

Aura’s built-in integrations run on Aura-managed cloud infrastructure. Your built apps’ databases, file storage and hosting are operated by Aura on the providers above — there is no third party with independent access to your app’s data.

​
Connected apps and agents

Work Mode and Agents act through your own connected accounts via Composio. You connect each app yourself, you can disconnect it at any time from Settings, and agents never send, delete or spend without your approval. See Agents.

​
Safer email

Glass envelope sealed with a shield
Aura Mail gives every message a trust score from 0 to 100 and flags impersonation and phishing attempts before you open them. Transactional email Aura sends — sign-in links, receipts, alerts — is delivered through Resend with SPF, DKIM and DMARC authentication, so you can tell real Aura email from fakes.

​
Built-app security

Every app you build with the AI App Builder gets automatic security reviews: a rule engine that learns from past findings, live threat-intel checks and safe library upgrades. See Security scans.

​
Common questions

On chat routes, no one — they run over zero-data-retention endpoints, so AI providers process each request and keep nothing. Aura staff cannot read your chat content.
Your files, knowledge base and app data live in Aura-managed cloud storage and databases, encrypted at rest, served worldwide through Cloudflare’s network.
The connection token is revoked and Aura can no longer act in that app. You can reconnect it any time.
No. Sending, deleting and spending wait for your approval.
Every message gets a trust score, and impersonation or phishing attempts are flagged before you open them.