01
No shared platform: every client company gets its own machine, with a French hosting provider, running nothing but its Syniaps.
- Your files, your synapses (your company memory) and your conversation history are stored on that machine, in France.
- Backups are stored in France as well.
- If your company moves to another machine, everything follows: access, connections, scheduled missions, cloud folders.
02
Nobody gets in without having been invited.
- An access gate placed in front of the application filters entries, company by company: only invited addresses get through.
- Every sign-in requires a second factor: a one-time code generated by an authenticator app (TOTP), with backup codes.
- The company's identity is verified at sign-up; a company has a single space, and its members are invited into it.
- An access can be suspended or removed at any time, with immediate effect.
03
To act on your tools and websites, Syniaps needs keys and sessions. They never leave the server.
- Website passwords, API keys, cookies and session states are kept in protected files on the machine, never in the database.
- The AI model has no access to them: it requests an action, the server performs it with your credentials, and only the result comes back.
- These secrets are strictly personal, even between colleagues: a website session is never shared.
- A guardian immediately removes from colleagues' view any file dropped by mistake in the shared folder that would contain a key or a session, and moves it to your trash.
04
On the company machine, every member has their own space.
- The intelligence works in a sandbox: it only sees your space and what the company has shared; the other spaces are physically invisible to it.
- Your files, your conversations and your connections remain yours until you decide to share.
- Sharing is an explicit gesture: a folder, a conversation, a project, a skill, and you can take it back.
05
An outage, a mistake, an unfortunate deletion: nothing is lost.
- Every night, an encrypted backup of your data leaves the server and is replicated.
- It is kept for six months.
- The decryption key stays in our vault: a stolen backup is unreadable.
06
What travels is protected, what happens is recorded.
- All exchanges between your browser, your phone and your server go over HTTPS (TLS).
- An audit log per company records sensitive actions.
- A public disclosure policy (security.txt) lets any researcher report a vulnerability to us.
07
To read your documents, search and respond, content is sent to the AI providers used by Syniaps and to the one of your connection, which may process it outside France depending on the services used. This is written in our data processing agreement, GDPR compliant, and in our privacy policy.
- The AI engine remains your choice: Claude, ChatGPT or Kimi, with your own subscription.
- Your secrets, however, are never sent to it (see above).
