How Pylto handles your data

Every row belongs to one organization, and the database enforces that on every query rather than the application alone.

A vendor key you bring is stored in an encrypted vault and is never shown back, not even a last four.

A key is resolved for one call and dropped. It never reaches a screen, a log, a run's evidence or a model.

A one-time link to your work email. No password is stored anywhere.

You join an organization by invitation. An email domain never grants access.

Every figure on a screen is reproducible from stored rows, and a claim without rows is refused by name.