Security

Gateway has access to your servers, so here's how we handle it.

Passwords and keys

When a server or a job needs a password, key or token, you enter it in Gateway. Your assistant can use it to get the job done. Don't paste them into the chat. You wouldn't want hunter2 ending up in someone's training data.

Malware scanning

Servers get sick too. Files that move through Gateway are scanned for malware before they're delivered, and before you download a file, Gateway checks it against known threats.

Confirming important changes

Removing a server, changing how Gateway connects to it, or closing your account means signing in again first. We like to be sure it's really you, and not an alien that found your laptop open.

Server identity

Gateway remembers each server's identity the first time it connects. If that identity changes, Gateway won't connect to it until the server is removed and added again.

Taking access away

You can disconnect Gateway from your assistant at any time in the assistant's settings. You can also remove a single server from Gateway, or delete it outright.

History

Every job is recorded: what ran, on which server, what came back and when. Sign-ins, access changes and billing are recorded too. Just not forever. We keep records, not stone tablets.

How long we keep things

Job history is deleted after 7 days. Stored files are deleted after the period your plan allows. Storage isn't free, and your data isn't ours to hoard.

Private networks

If your servers sit on a private network, Gateway can reach them through a private tunnel, so you don't have to open them up to the internet.

Teams

Team owners decide what each member can do. The team's history shows who did what, so nobody gets to blame the intern.

Abuse

We have zero tolerance for child sexual abuse material and report it to the authorities. We also comply with sanctions law. See Report abuse for more.

Who is responsible for security

Theo Rawls, founder and director of Next Generation Media Limited, leads Gateway's security: the platform's defences, abuse and malware investigations, and incident response.

Reporting a security issue

If you've found a vulnerability, email hey@trygateway.sh. Please give us a chance to fix it before you share it publicly.