Security at PaperCloud
You are handing an AI agent platform access to your company's work. Here is exactly how we keep that contained.
One instance, one customer
Paperclip is not multi-tenant, and PaperCloud does not pretend otherwise. Each subscription gets its own virtual server and its own database. Nothing is shared between customers except the control plane that starts and stops those servers.
AI credentials stay on your instance
Codex is signed in on your own server with your ChatGPT plan. The credential is written on the instance and is never sent to the browser or stored in our control plane. You can sign out and reconnect at any time.
Network surface kept small
Instances expose only HTTPS. The Paperclip application port, the database port and administrative access are bound to the machine itself and closed at the firewall.
Managed TLS
Every instance gets a certificate on its own subdomain, renewed automatically. Plain HTTP redirects to HTTPS.
Updates you can trust
Updates run against a health check. If the new version fails to come up, the previous release is restored and you are told what happened in the event timeline.
Your data is yours
Cancel and you can ask us for a copy of your instance data before the server is destroyed. We do not read your instance content, and we do not use it to train anything.