Security and your data
Where your brains are kept, how connection credentials are protected, what Ako Labs staff can reach, and what is recorded.
ako holds your organisation's knowledge and acts on its behalf. This page says how that knowledge is kept and who can reach it. As of 2026-10-15.
Where your brains are kept
Each brain is its own git repository on our servers. Every change to it is a commit, recorded with who made it: a person, or an agent named together with the person it acted for. Nothing changes a brain without that record.
Who can open a brain is decided on our servers on every request, whether it comes from ako's app, a connected app, Slack or a routine. To someone who can't reach a brain, it doesn't exist. See Roles and what they allow and Restrict a brain to certain people.
Personal brains
Only you can open your personal brain, and only in ako's own app. Connected apps, Slack and routines can't reach it. Admins and your organisation's owner can't open it, and no one at Ako Labs can open it in the product.
Connection credentials
When an admin or member connects another service, such as Linear, GitHub, Slack or an MCP server, ako stores the key or sign-in it gets. Each one is encrypted with AES-256-GCM before it is stored. ako never shows it again, not even to the person who added it.
Connecting an AI app such as Claude needs no key at all. You approve it on ako's own screen. ako stores only a hash of the access it gives the app, never the access itself. You can revoke a connected app at any time.
What Ako Labs staff can reach
- Staff can't sign in as you or act as you in your organisation.
- Staff pages never show a personal brain's content.
- A change staff make to your organisation, such as to its members, is recorded as made by Ako Labs staff.
- For public docs, staff can only put the last published version back online or take the site offline, and each is recorded under their name.
What is recorded
ako keeps a record of every change to who can do what:
- invitations, removals and role changes
- changes to who can reach a brain, and to site roles on public docs
- requests to reach another brain, and who decided them
- connections added, removed or changed, and connected apps approved or revoked
- transfers of ownership
If the record of a role or access change can't be written, the change doesn't happen.
Each organisation connection's page, under Settings, then Connections, shows the recent changes to it under Recent activity.