Security at Oogam

We know you’re trusting us with sensitive prompts and customer data. Here’s how we protect it.

All traffic is encrypted in transit with TLS. Sensitive data is encrypted at rest.

We store only SHA-256 hashes of API keys — the full key is shown to you once and never persisted.

Every account and organization is logically isolated; data is scoped per tenant at the query layer.

Usage and access are logged. We monitor for anomalous activity and abuse.

API keys can be scoped to specific products and rate-limited to reduce blast radius.

Built in India with options for regional data handling for enterprise customers.

Report a vulnerability to abuse@dwet.ai.