About Sigil
What Sigil is, in plain language
Sigil is a personal credential-management and permission layer. It lets an individual securely
connect their own accounts — such as Gmail, Google Calendar, Google Drive, their bank (via
regulated Open Banking) and their energy supplier — and then use those accounts through the
surfaces they choose: a WhatsApp assistant, the web, or AI tools such as Claude Desktop, Cursor
and ChatGPT — without giving any of those tools direct access to the underlying credentials.
When a user connects an account to Sigil, Sigil acts as a permission layer between that account
and the user's assistants. The user grants narrow, revocable permissions — for example, allowing
an assistant to send a single email on their behalf, rather than read access to their entire inbox.
Every action taken through Sigil is recorded in an audit log accessible to the user in real time.
Sigil does not access, store, or process a user's data on its own behalf — every API call is
initiated by a user-authorised assistant at the user's direction.
Sigil's data handling, retention, and deletion practices are described in detail
in our Privacy Policy.
Sigil's security model — including how user OAuth tokens are encrypted, who can
decrypt them, and what to do if you find a flaw — is documented in our
Security Policy.
Sigil's
Terms of Service
are also available.