What about security and data privacy?

Self-hosted: your infrastructure, your rules, no data leaves your network. Managed cloud: EU-resident, no training on your data, retention only as you configure. Auth via standard OAuth providers. Every agent action is logged as an event on the object it touched — fully auditable.