Your data is yours.

At a glance

You control your data

Chats you keep are encrypted in your Venta account. You can open, rename, or delete them from Chats.

Private from start to finish

Your messages are encrypted in transit and at rest. Session cookies are locked down with strict settings.

Content protection

Views you protect cannot be copied, saved or printed, and carry a faint watermark with your account id and the time, so a leaked screenshot can be traced back.

No hidden access

No hidden APIs, no cross-site tracking, no sharing your data with anyone. What you send is processed, and nothing else.

Security controls

• Encrypted in transit (TLS 1.3)
• Content Security Policy (CSP) headers
• HSTS with preload
• X-Frame-Options: DENY, except the two panes Venta frames itself
• Camera and location blocked, and the microphone allowed only to Venta itself
• Session cookies only — nothing that tracks or advertises
• The visitor count keeps no record of who you are

Connected apps are read when you ask, not copied

Deployment, team, device, and model stats on your dashboard are live pass-through reads from your connected accounts. They are shown the moment they are fetched, are never cached in our database, and stop the instant a connection is revoked.

• Each summary card shows when it was last updated

Most work runs without a device

Writing, answering questions and searching the web all happen on Venta's own servers the moment you ask. Nothing to install, and no computer of yours involved.

• Work Venta runs for you happens in its own scratch space, with limits
• The same confirmation rules apply to sensitive hosted actions

Device-linked work is opt-in

Anything beyond the cloud needs your machine. When you connect a browser, installed web app, or desktop node, it appears under Settings → Devices and is recognized automatically. Every linked device can be revoked from the same page, and revoking stops it immediately.

• Each device is listed with its kind, platform, and status
• A computer connects only after you pair it from your account, and a browser only once you sign in on it

Dangerous actions require you

Some actions are too big for a background agent to take alone. When a task reaches a risky step — sending, deleting, paying, publishing — it pauses and asks you before going on. Nothing proceeds until you answer it. It is a confirmation you make yourself, not a permission an agent holds.

• Deleting a chat, app, or workspace
• Revoking a linked device
• Changing or cancelling billing
• Resetting account credentials

Venta stays where you put it

A connected computer only does the things you ask for, one at a time, and you can see each one. Venta has no standing access to it. Disconnect it and that stops.

• Venta only acts inside the workspace you are in
• No background listening or surveillance of a connected device

Your key stays yours

Connect your own AI account and Venta uses your key only for the requests you make, and for background work if you choose it for that. You pay your provider directly, and Venta never sells a key. Venta trains on your requests only if you switch that on in Settings, where it is off by default.

• Connect a key from OpenAI, Anthropic, Google, xAI, Cerebras or a custom provider
• Your key is saved encrypted to your account and used only to reach the provider you picked

Every action leaves a trace

Event logs record who, what, and when: the member, the device, and the action. Name your devices in Settings so activity is easy to attribute. Sessions store only an HMAC hash of your session identifier, never the identifier itself.

• Event logs are kept while your account exists, and deleted with it.
• The workspace owner can read the logs

Workspaces work in the open

A team shares one workspace, and everyone signs in as themselves. You can see who did what, and only people in the workspace can see its contents.