Team AstaTrust centre
What happens to what you tell them.
Asta works with what you connect and hand over, and an agent tells only the people you put on the project. Team Asta is in beta — this page says what is true today, including the parts that are not built yet.
What the asking itself protectsTrue on every plan, including free — these fall out of how an agent works4 controls
Access you grant, and take back
Asta reaches only the mail and calendar accounts you connect, with the permissions Google shows you, and you disconnect them in Settings at any time. An agent on a project sees the files and people of that project.
You know before you answer
Every request says who is asking and what for, that you are talking to an AI, and that your name stays on your words. There is no surprise attribution, because there is no surprise.
Declining is an answer
You can pass, or answer half. That is recorded as a decline — never replaced with something plausible written in your voice.
Participants are scoped to one project
Someone who answers an interview link sees only the project they were invited to, and nothing you run elsewhere.
Controls you holdWhat you can do yourself, on every plan3 controls
Withdraw a link, close a round
Withdraw an interview link, or close a round and its open links go with it. Nothing further is sent or asked.
Download what you need
The documents Asta writes, as Word or PDF, and your uploads as they are. A full export of your account on request.
Disconnect, or delete it all
Disconnect a Google account, or delete your whole account, yourself in Settings. How it works.
Data and privacyHow answers are stored and who can reach them4 controls
Encrypted in transit and at rest
TLS everywhere. The app's databases and file volumes are encrypted at the provider; the database of our sign-in service is not yet. Annex II of the DPA has the detail.
Answers stay in their project
An answer given on one project is not visible from another.
Your content is not training data
What people tell an agent is not used to train models.
Where it lives
Servers, databases and backups in Germany. The AI models, Asta's sessions and memory (Anthropic), voice (OpenAI) and the telephone line of Asta's first call (Telnyx) in the United States. Annex III of the DPA lists every subprocessor.
Documents5 items
Data processing agreement
Published, incorporated into the Terms by reference. No signature round needed; we countersign a copy on request.
Security overview
Annex II of the DPA: what is implemented and what is not, stated plainly.
Subprocessor list
Everyone who touches your data, what for, and where. Annex III of the DPA.
Independent penetration test
Not done yet, as Annex II of the DPA says. We will publish it here when it is.
SOC 2 Type II
Not started, and no ISO 27001 either. Where a customer specifically needs a certification, we say so plainly rather than imply otherwise.