Most AI assistants start by asking for everything: your inbox, your files, your bank, and a copy of it all on their servers. Geyser starts from the other end. Your Agents work on your own computers, you choose which AI sees which work (including models that never leave your hardware), and the rules are enforced by Geyser rather than left to the AI. We never sell your data, and our own support team has to ask your permission before looking.
“I keep what I learn about your business in the place you chose for it, and I can’t change my own rules.”
Stored by Geyser
Your own computers with Geyser Host
AI services & apps you approve
Accounts, billing, connections, software updates, and service health.
Geyser stores your workspace’s data, and your Agents work on your own computers with Geyser Host. You choose which AI services and apps they use.
Your conversations, documents, and what your Agents learn are kept in their own storage, which we call a Customer Cell. We can host it for you in our US region, or you can keep it on systems you control, including your own Mac or Linux computer.
People and Agents can find the information they’re permitted to use. A private conversation stays private when it’s linked to related information, and asking another Agent for help doesn’t give access to that Agent’s memory.
AI models, voice services, search, and connected apps each need some of your information to do their part of a task. You can use services you’ve approved, or supported options running on your own systems.
Turn on Sensitive information checks and Geyser checks for private details before a message, memory, or file reaches a public AI provider. You decide what happens when it finds some: record it and send, remove what the built-in checks match, use a private model for the whole request, or block sending to public AI.
Geyser checks permissions itself, separately from the AI, the same way for every AI engine, so an Agent can’t argue its way past them. You choose which actions wait for a person’s approval, and an Agent that can see a screen still needs separate permission to control it.
Only the people allowed to control a computer get its mouse, keyboard, and file transfers. Everyone else you let in sees a view-only picture, and Geyser support can only watch, with a grant your workspace Owner approves.
Email, texts, and meeting speech are treated as untrusted. When someone outside your team starts a conversation, the Agent doesn’t take their word for anything: actions wait for your approval. No Agent can change its own rules.
API keys you add to your workspace are stored encrypted by Geyser and never copied onto an Agent’s computer, so an Agent can use your AI account without holding the key.
Each Agent has a daily model allowance and the workspace has spending limits. Any Admin can pause every Agent at once, and only the workspace Owner can switch them back on.
To run the service, Geyser needs your account, routing, billing, and health information. Your content is kept apart, in its own home with its own access controls.
If support needs to open your content, your organization’s owner approves it first, and we keep a record of that access.
See how the boundary worksTell us where the data should live, which AI may see it, and which systems your Agents need to reach.