The short version
- Overwatch only sees the systems you explicitly connect.
- Nothing customer facing happens without your approval.
- Your data is encrypted in transit and at rest.
- We never sell your data and never use it to train third-party models.
- You can export or delete your data at any time by asking.
What data Overwatch touches
Overwatch works with the revenue data you connect: CRM records such as accounts, contacts, deals, and activity history; pipeline and quota numbers; email drafts and sending metadata for outreach you approve; and calendar availability for scheduling. Connections use the minimum scopes required for the work, and you can disconnect any system at any time.
Where your data lives
OverwatchOS runs on Cloudflare infrastructure. Data is encrypted in transit with TLS 1.2 or higher and encrypted at rest. Processing occurs in the United States. We do not sell customer data, share it with advertisers, or use it to train third-party AI models.
The approval boundary
This is the line the whole product is built around. AI workers prepare work; they do not send it. Any action that reaches a customer, changes a record of consequence, or commits you to anything is routed to you for approval first. Every worker operates under explicit permissions you set, every approval is logged, and you can pause the entire operation at any time. Nothing customer facing happens outside your rules.
Connected platforms
When you connect a CRM, email provider, or other platform, Overwatch acts through credentials and permissions you grant on that platform, and your use of it remains governed by that provider's own terms and security practices. We access connected platforms only to do the work you have configured and approved.
Certifications, honestly
OverwatchOS does not currently hold SOC 2 or ISO 27001 certification. We are an early-stage product and we will not pretend otherwise, and you will never see a compliance badge on this site that we have not earned. Formal SOC 2 certification is on our roadmap as the company grows. Until then, this page is our commitment: if you have a security question, ask it, and you will get a direct answer from the founder.
Retention, export, and deletion
Your data remains yours. On request we will export your data in a standard format or delete it from our systems, subject to legal retention requirements. Disconnecting a platform stops all access to it immediately.
Report a concern
Found a vulnerability or have a security question? Email [email protected] and you will get a response from a human, not a queue.