PenroeSecurity for your client data.
Penroe™ is an AI platform for professional services firms. Your team controls what information is shared and what AI is allowed to do with it.
SOC 2 Type II
Compliant
GDPR
European data protection
CCPA
California privacy rights
Experience building enterprise software.
Before Penroe, we led product and engineering at Costello and Salesloft, serving over 5,000 customers and some of the world’s largest enterprises. That experience shapes how we build security, reliability, and accountability.
Meet the teamHow Penroe uses your data with AI.
Penroe sends relevant information to an AI model to answer questions and organize work. That information is not published or made available to other Penroe customers.
Information you can see
- Your email and calendar
- Projects and items you can see
Information for the request
Penroe sends selected information to the AI provider. It does not send your entire workspace.
An answer with sources
Penroe links the answer to its sources. It can only show information you are allowed to see.
Will our data train an AI model?
Penroe improves its prompts and workflows without training the AI models. Google Cloud supplies the models for Penroe’s built-in AI. Its terms require permission before customer data can be used for training or fine-tuning.
What if we connect ChatGPT or Claude?
When you connect ChatGPT or Claude, Penroe limits the connection to information you can already see in your selected workspace. Penroe enforces blocked actions, and you can disconnect the service at any time. Your chosen service’s terms and privacy settings govern how it handles the information you request.
Your team controls access and sharing.
You decide what information is added to a project, what AI may change, and what clients can see.
Penroe uses information already added to a project for shared summaries and automatic plan updates.
Private activity and sharing rules
By default, Penroe automatically adds email and meetings only when every project member already has access in the connected tool. Sharing with a wider project audience requires the approval of the person whose email or calendar is being shared. Each approved rule defines which activity Penroe may share with that project team, and approval can be withdrawn at any time.
Penroe keeps activity it flags as sensitive private until its owner approves sharing. AI sensitivity checks provide an additional review step alongside your team’s sharing rules and permissions.
AI actions and approvals
Admins set limits on AI actions, and each person can restrict them further. In Penroe chat, changes require approval by default. Deleting data or changing who can see it requires approval or is blocked.
An email or document cannot change these permission settings. Connected services such as ChatGPT and Claude manage their own approval prompts; Penroe enforces blocked actions.
Client portal access
Clients can open only the projects they are invited to in a separate portal. They do not see internal risks. Tasks appear when your team shares them or when they belong to the client. Your team chooses which notes and internal comment threads to share.
Built-in protections for your data.
Penroe combines encryption, database-enforced access, and checks on the content AI reads and produces.
Encryption in transit and at rest
Penroe uses TLS to encrypt connections to the app, connected tools, and AI providers. Database connections also require encryption.
Stored data is encrypted. Credentials for connected tools have an additional layer of encryption, and production secrets are kept in a managed secret store.
Prompt-injection defenses
Penroe separates retrieved content from the instructions that guide the AI, marking emails and documents as untrusted data.
- Penroe strips hidden formatting characters that can disguise instructions in that content.
- Penroe removes citations to records that were not supplied as sources for a project summary.
- Earlier AI summaries are treated as untrusted when reused, with embedded links and images removed.
- When a summary is copied as rich text, Penroe removes embedded images and executable links.
- Workspace separation
- The database enforces each customer’s workspace boundary and access to the records within it. Isolation is enforced below the application interface.
- Malware checks before use
- Uploaded files and imported email attachments stay blocked until a malware scan returns clean. While blocked, neither your team nor Penroe can open or read them.
- Private infrastructure and network defenses
- The database has no public endpoint, and file storage blocks public access. A web application firewall screens common attack patterns, with DDoS protection at the network edge.
- Backups and recovery
- Automated database backups and point-in-time recovery provide a way to restore data after an accidental change or loss.