Security

Keep control of what Sherpa can see and do.

Altitude gives your admins single sign-on, roles, team policies and an audit log, so you and your team can hand work to Sherpa without handing over the keys.

Request a demo

Altitude

Dashboard / Models and routingMC

Models and routing

Which models your organization may use, where they run, and how each request is routed.

Auto routing

Each step goes to the least expensive allowed model that meets its quality bar. Anything below the bar escalates to a frontier model.

Search and extraction → open modelsDrafting and review → frontier

Steps routed, 30 days1.28M

Served by open models71%

Cost vs. frontier only−46%

Allowed models

Model	Provider	Tier	Runs in	Data retention	Available to
Fable 5.1	Anthropic	Frontier	Anthropic API · US	Zero retention	Everyone
GPT-6 Astra	OpenAI	Frontier	Azure OpenAI · US	Zero retention	Finance, Legal
Sonnet 5	Anthropic	Balanced	Anthropic API · US	Zero retention	Everyone
GLM 5.3	Z.ai · open weights	Open	Altitude-hosted · US	Zero retention	Everyone
Kimi K3	Moonshot AI · open weights	Open	Altitude-hosted · US	Zero retention	Everyone
DeepSeek V4	DeepSeek · open weights	Open	Blocked by policy	Not permitted	Nobody

Identity and access

Decide who gets in and what they can touch.

Single sign-on and directory sync run through the admin portal. Roles at the organization and on each resource keep access to the people who need it.

Single sign-on
Your team signs in through your identity provider.
Directory sync
People join and leave Altitude as they join and leave your directory, through SCIM.
Organization roles
Admins manage the organization; members do the work.
Resource roles
Owner, editor or viewer on each project, file, chat, research table and automation.
Groups
Give a group access once instead of person by person.

Altitude

Dashboard / IdentityMC

Identity

Sign-in, provisioning and the access each group gets on its first day.

Single sign-onEnforced

Okta · SAML 2.0Password sign-in turned off

Directory syncSCIM

240 people · 14 groupsLast sync 2 minutes ago

OffboardingAutomatic

Removed in Okta, removed hereTokens revoked within 60 seconds

Access on day one

Everyone who joins this group signs in to Altitude already connected. No setup, no OAuth prompts.

Role: MemberModels: frontier and openWorkflows: Finance library

Google DriveShared drive: Finance
Slack#finance, #month-end
NetSuiteRead
SalesforceRead
NotionFinance wiki
OutlookMail and calendar

Plus 3 more: Workday, Box and Zoom

Recently provisioned

Person	Group	Access	Ready in
Maya Chen	finance	9 tools connected	14s
Jonah Park	ops-builders	7 tools connected	11s
Ruth Adeyemi	legal	6 tools connected	12s
Sam Ortiz	contractors	2 tools connected	8s

Team policies

Set the rules once for the whole team.

Admins choose how Altitude behaves across your organization, and the policies apply to everyone.

Who can edit team rules, templates and skills
Who can invite people
Whether projects can be shared, and with whom
The default role for new project members
Whether chats can be shared
Whether automations are on for your team

Altitude

Dashboard / PermissionsMC

Permissions

What each role may do. Roles are assigned from your identity provider’s groups.

Capability
Workflows
Run shared workflows
Build and test workflows
Publish to the organization
Agent
Search the web
Browser agent on approved sites
Add custom MCP servers
Data
Read connected drives
Write files back to drives
Export research tables
Models
Frontier models
Open models only

Mapped from Okta

alt-adminsAdmin

ops-buildersBuilder

all-staffMember

contractorsGuest

BuilderBuilds workflows and tests them on samples. A workflow reaches everyone else only when an admin publishes it.12 people · 3 pending reviewsCan do 8 of 11

Audit and usage

See who did what, and how much it used.

Every sign-in and browser event is logged, and usage breaks down the way your finance and IT teams ask about it.

Audit log
Sign-ins and browser agent events, in the app.
Audit-log export
Export the audit log from the admin portal.
Usage reporting
See usage by person, feature, channel and model.
Rate limits
Usage is rate limited across your organization.

Altitude

Dashboard / SpendMC

Spend

What the organization spends on AI, by team, model and person.

Spent this month$18,420

of $25,000 budget

Saved by routing$15,870vs. the same work on frontier models

Cost per finished task$0.62down from $1.14 in June

Active seats214of 240 provisioned

Daily spendFrontierOpen models

Budgets by team

Team	Members	Spent	Budget	Percent used
Finance	38	$7,420	$9,000	82%
Legal	22	$4,180	$5,000	84%
Operations	41	$3,310	$6,000	55%
Sales	64	$2,240	$4,000	56%
Marketing	29	$1,270	$3,000	42%

Data handling

Keep your data inside your organization.

What you connect and upload is indexed for your organization alone.

Your index stays yours
Documents are indexed per organization, so search only reaches your own.
No training on customer data
Your files, chats and outputs are not used to train models.
Encrypted in transit and at rest
Data is encrypted as it moves and where it is stored.

Browser agent

Let Sherpa browse only where you allow it.

When Sherpa needs a website, it works in a browser you can watch, under your organization's rules.

Off unless it is enabled for your organization
Runs in a disposable virtual machine you can watch live
Per-site allow-lists and approval for each website
A separate model reviews every step it takes
Browser events are written to the audit log

Altitude

Boston to Denver, 14–17 OctMC

Book me the cheapest refundable nonstop from Boston to Denver, 14 to 17 October.

Checkout is ready: Cairn Air Flex, $412 round trip, fully refundable. I didn’t pay. Purchases are yours to confirm, so add the card and press Pay to book.

Browser

Cairn AirBookManageCheck inSign in

FlightsFareTravelerReview and pay

Boston to Denver, round tripBOS → DEN · Wed 14 Oct · 07:05 – 09:32 · Nonstop · DEN → BOS · Sat 17 Oct · 18:10 – 23:48 · Nonstop

Flex fare · 1 adult · Maya Chen$412.00

Card number1234 1234 1234 1234

Pay $412 and bookNot pressed: stopped by the safety review

Step 5 of 5

Step reviewchecked automatically, logged for your team4 allowed · 1 denied

Trust center

Review our security documentation before you roll out.

Your security team can request our reports and policies before Altitude reaches the rest of the company.

SOC 2 Type I
SOC 2 Type II

FAQ

Answer your security team's first questions.

Access, audit, data handling and the browser agent, in short.

See Altitude on your team's actual work.

Bring a task your team did last week and see what Altitude hands back.

Request a demo

Keep control of what Sherpa can see and do.

Models and routing

Decide who gets in and what they can touch.

Single sign-on

Directory sync

Organization roles

Resource roles

Groups

Identity

Set the rules once for the whole team.

Permissions

See who did what, and how much it used.

Audit log

Audit-log export

Usage reporting

Rate limits

Spend

Keep your data inside your organization.

Your index stays yours

No training on customer data

Encrypted in transit and at rest

Let Sherpa browse only where you allow it.

Review our security documentation before you roll out.

Answer your security team's first questions.

Do you support single sign-on and SCIM?

Who can see a project, file or chat?

Can we see what happened and who did it?

Is our data used to train models?

Can Sherpa browse the web on its own?

Do you have SOC 2?

See Altitude on your team's actual work.