For the people who sign off

True today

A person admits every user

There is no self-serve signup. Each request for access is reviewed by a person. Guests you invite to a room join by link, and you admit each one as they arrive. Revoke the link and they are out.

Only the owner decides

Guests can read the work and mark it up. Only the owner of a decision can adopt the work, reject it with a reason, or defer it. Modyl proposes and cites what it saw. It cannot adopt its own proposal.

Every answer has a record

A room holds one decision: the work, the proof behind it, and who answered. Each answer is tied to the version the person saw, so it stays clear which version was approved.

Rules reach connected agents

A rule you confirm fires in every connected agent session of a workspace. In Claude Code, Codex and Amp it can stop a matching tool call before it runs. If the check takes longer than 2 seconds or cannot run, the call goes through. It catches some misconduct, not all.

Who can read your data

Modyl is operated by Carcinize Corporation. Unless an interaction is marked confidential and protected by keys you hold, what you send through Modyl is readable by us while we operate the service. We read it to run the service, investigate abuse, answer a lawful request, or help you when you ask. We do not sell it and we do not use it to train models.

Some providers handle content to do their part, such as the model, voice and connector providers. Research providers handle web searches under their standard retention terms, because we have not yet confirmed zero retention with any of them. The privacy policy names each provider and what it receives.

Confidential channels, which we cannot read, are open only to design partners testing them.

Planned, not available today

• Nov 2026Organization policy. Your organization sets goals, priorities and room access by policy, rooted in the systems that already run it.
• Cost watch. Spend, repeated failures and how deep agents delegate trigger a call before the bill grows.
• Zero data retention, on Enterprise. Enterprise workspaces can require zero data retention from the providers that handle their content.
• Dec 2026Deploy where you need it. Your own cloud (BYOC), bare metal, or a hybrid cloud.
• Bring your own keys. Run inference on your own model provider keys, and encrypt workspace content with keys you hold.

What we do not claim

Modyl holds no security certification today, such as SOC 2. Rules on connected agents catch some misconduct, not all, and a check that takes longer than 2 seconds lets the call through. If your review needs something this page does not answer, write to hello@modyl.to and a person will reply.