Not all data is equal. Each module of your account can operate at one of three levels, activated upon request:
Level 1 · Open with your AI team
Your team of agents works the information: it qualifies, drafts, follows up and reports. Data lives encrypted at rest and isolated per account. This is the standard level: maximum productivity with the protections on this page.
Level 2 · Private from OMB
Same as level 1, and additionally the module (or your entire account) is placed beyond the reach of OMB staff, including the platform's supervision mode. If the support team requires access, you grant an explicit, time-bound permission recorded in the audit log.
Level 3 · Encrypted vault
For information that not even the AI should process: the module is encrypted with a key bound to your account, agents do not interact with it, and no human reading exists. You receive a recovery kit with single-use codes that only you keep, with an optional second administrator.
The implication is explicit: vaulted information cannot be processed by your AI team. And if you lose your access and recovery elements, there is no back door: the information becomes unrecoverable, for OMB as well. That guarantee is deliberate.
The commitment we can subscribe to, because it is verifiable: no OMB person can access your data without your express, traceable authorization, and information you mark as vaulted is accessible to no one. A platform that offers artificial intelligence over data it claims it cannot read incurs a contradiction: one of the two statements cannot be true.
Responsibilities: ours and yours
What OMB subscribes to
Keeping the measures on this page at the state of the art; answering for its subprocessor chain; containing, notifying and remedying incidents at its own expense; and never accessing level 2 or level 3 information without your express, traceable permission.
What remains in your hands
Safeguarding your credentials and your recovery kit; enabling the second factor on your administrative accounts; defining which modules operate at which level; and maintaining the agreed verification channel. In encrypted-vault modules, losing your access and recovery elements makes the information unrecoverable for everyone, OMB included: it is the mathematical counterpart of no one else being able to get in.
This page is complemented by the Confidentiality and Data Processing Agreement we sign with every customer handling sensitive information, where these obligations carry contractual force.