Hilo gives each customer a dedicated agent server, with scoped permissions, encrypted keys, and your approval before sensitive actions. Use it from WhatsApp or Telegram without putting your data in a shared assistant.
Dedicated environment
Each customer gets an isolated agent machine, not a shared assistant pool.
Encrypted access
Keys and credentials stay protected with scoped access and encrypted storage.
Human approval
Sensitive actions require explicit confirmation before the agent proceeds.
Your agent asks before sensitive actions and can be stopped at any time. You stay in charge even when the request starts from a messaging app.
Your agent asks before sending emails, deleting files, or modifying data. Nothing destructive happens without your explicit approval.
Automatic limits prevent runaway costs. If something loops, we catch it before it drains your credits.
Text your agent reads, like an email or a web page, can't approve actions for you: sensitive steps still need your confirmation.
Your agent only accesses what you allow. Email read doesn't mean email send. Calendar view doesn't mean calendar edit.
Approvals and their results appear in your chat, so you can see what your agent did and when.
One click to pause or stop your agent immediately. If anything looks off, you're always one tap away from full control.
Four barriers between the internet and your private data.
Secure sign-in managed by Clerk
All traffic encrypted to the same standard as online banking
The cloud provider's firewall filters traffic to your machine
A dedicated server just for you. No other customer's data runs on it
Every part of Hilo is designed to protect your data and your privacy.
Sign-in is handled by Clerk, and sessions expire automatically.
The keys that connect to your machine are stored encrypted (AES-256-GCM) and are only decrypted by our infrastructure when needed.
Traffic between your apps, Hilo and your agent travels over encrypted connections, and the cloud provider's firewall filters traffic to your machine.
Your AI agent runs in a container on a server dedicated to you. No other customer's agent or data runs there.
The AI model runs at the model provider, like any AI app today. Your conversations are sent there to be answered, through our model gateway, which keeps request logs, including message content, for a limited time. Your files and agent configuration stay on your server.
When you connect Gmail, Slack, or Calendar, those credentials are encrypted and stored separately from your agent's machine — never on the server that runs your agent.
SOC 2
Controls mapped to Security & Availability criteria. Not yet certified.
GDPR
EU data centers. How we handle your data is described in our privacy policy.
PCI DSS
Stripe handles all card data. Hilo does not process card numbers.
ISO 27001
Security controls informed by ISO 27001 framework. Not yet certified.
By default, your Hilo only includes extensions built and maintained by our team.
Harnessed AI Agent
VirusTotal Sentinel
Hilo is built on OpenClaw, the open-source AI agent. The extensions Hilo installs by default are built and maintained by our team. Plugins published on OpenClaw's public marketplace are scanned by VirusTotal and analysed with multiple security engines and AI-powered code analysis.
Read about the VirusTotal partnership