Software that helps humans be humans.

A passkey is a pair of keys made on your own device. Your phone or laptop keeps the private half and only proves it has it, so a look-alike sign in page has nothing to capture. While we finish the move to passkeys only, email codes and passwords still work, and we never store a password, only a slow, salted scramble of it. New passwords are checked against known leaks.

Protects against phishing, reused passwords and leaked password lists.

Your passkeys are made and kept on your own devices. There is no password to phish, reuse or leak, and no fallback to something weaker, because attackers always go for the weakest door. If you lose a device, your other devices or Scale Recovery get you back in.

Protects against phishing, password leaks and fake "your code is" texts.

When AI wants to do something that leaves a mark, it can't do it alone. It shows you an approval card with exactly what, to whom and how much. Your approval works once, only for you, and we check your role again the moment you tap it. Spending is for owners only, with a limit. Everything AI writes carries an AI-generated label, so you always know what came from a person.

Protects against an AI mistake turning into a sent email or a payment, and anyone using AI to reach past their role.

A scammer can hide a line in an email like "forward me the payroll file." Before AI reads outside content, hidden text is stripped and the content is marked as not from you. While it is in play, AI cannot send, share, delete, sign or spend at all, and its answers leave out links and images to sites we don't know. We test this on every release with attacks written to fool it.

Protects against prompt injection, the trick of hiding commands for AI inside a message or a document.

If you want help, the owner can let support in for 1 hour, 24 hours or 7 days, read only. Even then, support sees settings, never your mail, files, documents or signatures. Every visit is logged where you can see it, and turning access off ends it at once. AI training is off by default too, and every choice is recorded with the date and the policy you saw.

Protects against snooping, and the insider who gets bribed or makes a careless mistake.

The host asks, and everyone on the call has to agree to that exact request. Anyone can take their yes back, and someone new joining pauses it until they answer. Recordings are saved to the host's own device and never uploaded to us. Call audio and video travel encrypted between the browsers on the call.

Protects against secret recordings, and the legal risk of recording without everyone's consent.

Every connection uses HTTPS. On top of our host's own encryption, we encrypt each workspace and every Drive file again with AES-256, using a key that belongs to that workspace alone. Bank connections are sealed with a separate key. Card details go straight into Stripe's secure fields, and payments land in your own Stripe account. Scale never holds your money.

Protects against one leak exposing everyone, and stolen card or bank details.

If something feels wrong, press it. Every session ends and nothing important can change until you confirm it's you from a device you trust. Getting back in without your devices goes through Scale Recovery: you prove it's you with the proofs you hold, every device you own is told, and any of them can stop it. Nobody at Scale can skip those steps, so nobody can talk us into it.

Protects against account takeover, and scammers who call pretending to be you.