---
title: Useful AI. Clear boundaries. - Keeploop
url: https://keeploop.app/security
description: Choose what your AI may read and do, with approvals on your Mac.
docs_index: https://keeploop.app/llms.txt
---
SECURITY, IN YOUR HANDS

# An assistant. Not a blank check.

Let it find the thread. Ask before it sends. Keep the rest out of reach.

[See how it works](https://keeploop.app/security#details)

YOUR RULES ILLUSTRATION

### Helpful has boundaries.

Read work mail **Allowed**

Send an email **Ask me**

Read personal mail **Blocked**

ON YOUR MAC

Send this reply to Maya?

Deny Allow Once

THREE DIFFERENT DECISIONS

## What it can see. What it can do. Who says yes.

1. ### Choose the sources

   Enable the apps, Mail accounts, folders and calendars you want to share. Access profiles can narrow what an AI app sees.
2. ### Set the rules

   Block an action, ask before it happens, or allow the actions you trust. Rules can distinguish actions, recipients and accounts.
3. ### You approve, not your AI

   When a rule requires approval, Keeploop asks on your Mac, or on an approval destination you set up, like Slack or your phone. Telling your AI "yes" never counts as approval.

A CONCRETE EXAMPLE

## Read broadly. Act carefully.

Find the relevant work conversation, then prepare a draft. The request does not grant permission to send it.

TRY ASKING

> Find Maya's latest question in my work mail. Draft a reply using the project note, and show me what you used. Do not send it.

Requires Mail and Notes read access, Mail draft access and any approval your rules require.

BUILT INTO THE CONNECTION

### Local approval

Every new web or phone AI app needs your approval on the Mac. The Mac and the browser show the same code. Remove an app on the Mac to revoke it.

### A narrower remote surface

New emails, texts, Notes and Slack posts only come from apps on the Mac. From a web or phone AI app, an AI can at most reply in an existing Mail thread, under your rules. One-time and MFA codes are hidden from its results.

### Activity you can inspect

See which tools ran and when. The Remote activity log records tool use, not message bodies.

Web and phone AI apps reach your Mac through one Keeploop URL. Our connection service passes requests to your Mac and results back. It never stores them. Your Mac checks every request against your rules. Prefer no Keeploop server in the path? [Use your own tunnel](https://keeploop.app/connect#own-tunnel).

Security controls reduce access; they do not make AI infallible. Review important answers and the details of any action you approve.

TRY PRO FIRST

## Make it useful before you decide.

Connect your everyday sources and a compatible AI app. Try a morning brief, prepare a real reply, then watch one thread you care about. Try every Pro feature before you decide. Source permissions and provider support still apply.

[Try a reply-to-agent handoff](https://keeploop.app/use-cases/keep-work-moving) [Compare the plans](https://keeploop.app/pricing)

YOUR MAC. YOUR CALL.

## Set the boundaries. Then get some help.

[Download free](https://keeploop.app/download) [How installation works](https://keeploop.app/download)