Updated on October 18, 2026
Security and subprocessors
Draft under legal review. This text is provisional and may change before Tripula launches. In case of any discrepancy, the Portuguese version prevails.
How Tripula isolates machines and protects what's yours, and which companies process data so we can run the service. We don't advertise certifications: what's here is how the platform works today.
1. One VM per machine
Each machine is a virtual machine with its own kernel, not a container shared with other customers. A malicious package, a prompt injection or a wrong command reaches that machine, not the others, and not your computer.
Only the machine's owner and the people they invite can get in. A fork starts without any logins: Claude, Codex, GitHub, SSH keys and cloud credentials are wiped from the copy.
2. Secrets the agent never sees
Project API keys are stored encrypted in the panel. The machine only has a placeholder, which the platform swaps for the real key on the way to the addresses allowed for it: anywhere else, it's worthless. GitHub tokens follow the same path.
The git SSH key also stays off the machine: on every push, the machine asks the panel for the signature without ever holding the key.
The placeholder protects the key, not its use: whoever is on the machine can call the API, but only at the secret's addresses and only from inside a machine of the organization.
3. Internet under control
The machine's owner or an organization admin can restrict outbound traffic to a list of addresses. The block comes from outside the machine, at the platform's proxy: not even sudo inside can open it. That way, a tricked agent or a compromised dependency can't send your code to an arbitrary server.
4. Access and data in transit
Nothing on the platform listens on a public port. Access to the panel and the machines comes in through Cloudflare's network over HTTPS, and SSH goes through an authenticated, encrypted tunnel to the panel.
SSH keys, tokens and secrets stored in the panel are encrypted with a master key kept apart from the database and its backups.
5. Backups
Machine disks (home, Docker and agent settings) get a daily copy, kept for 3 days. The Panel's database gets a daily copy, kept for 14 days. Today these copies stay in the same data center as the machines; an off-site copy is planned.
You can also save restore points of your machine and go back to them whenever you like.
6. Subprocessors
Providers that process personal or customer data for Tripula to run the service, under contract. We notify you by email before adding a new one.
| Company | What it does | Data | Region |
|---|---|---|---|
| Hetzner Online | Servers that run the machines and the panel. | Everything on the machines (code, databases, files) and the panel's database (account, organization, usage events). | Germany or Finland (EU) |
| Cloudflare | Network, website delivery and the access tunnel to the panel and machines. | IP address, technical request data and traffic in transit. | Global network |
| Resend | Sending emails: confirmation, invites, task and billing notifications. | Name, email and the content of the notification. | USA |
| Stripe | Credit card billing. | Name or company name, CPF or CNPJ, address, email and card details, which stay with Stripe and never with Tripula. | USA |
| GitHub (if you connect it) | Signing in with GitHub, accessing repositories and checking metrics against PRs. | Account login and ID, access token (stored encrypted) and PR data. | USA |
7. Model providers are not subprocessors
Claude, Codex and other models run on the developer's own account with Anthropic, OpenAI or another provider. What the agent sends to the model goes out from that account and is governed by the provider's terms and privacy policy: Tripula neither contracts nor pays for that processing.
8. Reporting a vulnerability
Found a security flaw? Write to security@tripula.dev with the steps to reproduce it. We'll confirm receipt and keep you posted until it's fixed.
Please don't disclose the flaw before it's fixed, don't access other customers' data and don't run denial-of-service tests.
9. Incidents
If a security incident affects your data, you'll be notified, and so will Brazil's National Data Protection Authority (ANPD) when the law requires it.