Security
Built so your data stays yours.
CIRO was designed for companies whose numbers are confidential. Here is exactly how we protect them.
Every company’s data is kept separate, with row-level security on every table.
Each person sees only their own data or what is shared with them: by person, team or the whole company.
CIRO reads your ERP, CRM and databases. It never changes the source systems.
Your data stays out of model weights. Always.
Schema-level tokenization before any AI call, so models never see raw identifiers.
SSO, two-factor authentication and sessions you can revoke.
Answers show the query and the systems behind them, so anyone can check.
Larger companies can run CIRO in a dedicated environment, agreed case by case.
The CIRO cloud runs on Amazon Web Services in the United States.
In the product
Security and administration, feature by feature.
Security and administrationIsolated tenants, roles, SSO, two-factor and an audit trail, as implemented.7 features
- Row-level security per tenantEvery database query runs with the organization context set, and the application role cannot bypass it. The product states it on screen: your data is isolated per tenant, never used to train AI models, and encrypted at rest and in transit.
- Organization rolesViewer, Member, Admin and Super Admin, each with a listed set of capabilities, assigned when you invite someone.
- Share any resourceJust me, Everyone in org or Specific people, as Viewer or Editor. Works on dashboards, data sources, views, collections, notebooks, investigations and Studio projects. People outside the organization get an invitation by email.
- Sign-inContinue with Google, GitHub or Microsoft, or email with a one-time code at signup. Two-factor authentication (TOTP) with an authenticator app for sensitive admin actions.
- Sessions15-minute access tokens with rotating 7-day refresh tokens; a reused token revokes the whole session.
- Activity logA filterable feed of workspace events with CSV export.
- Answer guardrailsPersonal data such as emails is masked in AI answers, and prompts and generated SQL are checked before they run.
Need a security review? Write to us and our team will walk yours through the architecture.
CIRO AI · November 4, 2026
Join the waitlist before November 4.
Free to start. Or let our team take your ERP live in about four weeks.