AI Security and User Protection

We do not rely on the AI model to follow rules. Permissions are enforced by Vallo’s servers and database, which check who you are and what you allowed on every request, and again before every action. If the model is tricked, confused or wrong, the lock still holds.

• Every lookup runs as you, under the database’s row level security, so it cannot reach another person’s records.
• The assistant receives only the smallest piece of information needed for one answer.
• Passwords, passcodes, sign-in codes, security keys, card numbers and card security codes are never given to the model.
• Communication is encrypted in transit, and sensitive stored information is held under the same controls as the rest of Vallo.

The assistant cannot pay. It can prepare a summary showing the service, the recipient, the amount and any fees. A payment starts only when you press Confirm, and Vallo then asks for the security check it uses for all money, with your session unlocked. The result you see is the result our licensed provider returns. If a payment fails you are told, and you can try again. The assistant never stores card details and never makes a hidden transaction.

Listings, messages and posts are written by other people, and someone could try to hide instructions in them. Everything the assistant reads is treated as data, marked as such to the model, and cannot grant itself a permission or start an action. Only the buttons you press can do that. Inputs are validated and outputs are cleaned before they are shown.

• Requests are rate limited for each account.
• Sensitive actions and refused requests are written to a security record that you can see in Settings.
• If the assistant is asked eight times in ten minutes for things you have not allowed, it switches itself off for your account and our team is alerted.
• Confirmations expire after a short time and cannot be reused.

Turn the assistant off in Settings, then tell us through Help and Support. A person reads it. Turning it off revokes every permission immediately and does not touch your records.