For IT and security teams
IT approval pack
One page to help your IT team approve Taktstone. Questions: hello@taktstone.com
1. What runs where
| Part | Where it runs | Needs |
|---|---|---|
| Hosted workbench and coach (free trial, Solo, Team) | Your browser, served from our server in Canada (OVHcloud, Beauharnois, Québec) | A modern browser. No installation, no AI account, no browser extension. |
| Offline workbench (Pro) | Local files on the user's computer | A browser; Node.js 18+ to build the workbench |
| AI agents (optional) | Claude Code on the user's computer, using your organisation's own Claude plan | Claude Code with a Claude Pro, Max, Team or Enterprise plan (billed by Anthropic, not by us) |
2. Data flow of the hosted workbench
- No third-party calls from the workbench. The app loads only from our own domain. No analytics, trackers, fonts or AI services are loaded inside the app, and no browser data goes to other services. The statistics engine runs in the browser and on our server, as code; no AI computes numbers.
- Sign-in: one-time codes by email; there are no passwords. Codes and session tokens are stored only as hashes. Sign-in emails, sign-off requests and trial reminders are sent through Resend (email delivery).
- Tenant isolation: each organisation's projects, members, roles and audit log are stored separately on the server. No request reaches across organisations.
- Access control: roles are admin, editor, approver (adds tollgate sign-offs only) and viewer. Members can be limited to selected projects. Sign-offs are stamped by the server with the signer's account and cannot be changed afterwards.
- Audit: sign-ins, saves, sign-offs and member changes are logged per organisation and kept for 2 years.
- Payments: handled by Paddle.com (merchant of record). We never see or store card data.
- Retention and deletion: as in our privacy policy. An organisation's data is deleted on request.
3. The optional AI agents (Claude Code)
- The agents are instructions and tools (a Claude Code plugin) that run inside your own Claude Code. We never proxy, store or resell AI usage, and we have no access to your Claude account.
- What the agents read and write stays under your Claude agreement and your organisation's Claude settings. Numbers still come from the Taktstone statistics engine, never from the model.
- On Claude Team and Enterprise plans, admins can assign Claude Code seats and manage settings and usage centrally (Anthropic announcement). Many organisations approve Claude Code separately. Taktstone works fully without it.
4. Hosting and transport
- HTTPS only, behind a reverse proxy with security headers (strict Content-Security-Policy, no framing, HSTS).
- Server: Canada (OVHcloud, Beauharnois, Québec); nightly backups on the server. Staging and production are separate services.
- Regulated or air-gapped? The Enterprise plan runs on your own premises, with signed builds, an SBOM and a validation pack. Ask for the security pack.
5. Documents
Privacy policy (sub-processors, retention, your rights) · Terms · Refund policy. A data processing agreement is available on request.