Verifiedclaw-link.dev

ClawLink Trust Center

Compliance and Security Overview

This Trust Center gives transparent visibility into how ClawLink handles security, compliance, governance and data. It puts everything your procurement and security teams need in one place, and it says plainly where the boundaries are.

4 PoliciesQuestionnaire on requestclaw-link.dev

Compliance

All active

  • GDPR

    Compliant

  • SOC 2 Type 2

    Compliant

2

Frameworks

20

Controls

12

Subprocessors

4

Documents

Connect your apps to your own AI agent

ClawLink connects Gmail, Slack, Notion, GitHub and many more apps to the AI agent you already use: OpenClaw, Hermes, Claude, ChatGPT, or any agent through the ClawLink CLI or MCP server. Apps connect through hosted OAuth, so you never register your own OAuth apps or paste provider secrets into a chat. ClawLink keeps a reference to each connection, not your password, and you can disconnect any app at any time.

4Policies

Public policies and agreements that govern how we handle your data.

20Controls

Safeguards continuously maintained across our infrastructure and processes.

  • Credential Management
  • Access Control
  • Data Privacy
  • Data Retention & Destruction
  • Change Management
  • Network Security
  • Authentication
  • Billing
  • Acceptable Use
  • Incident Response

12Subprocessors

Third parties that process data on our behalf under contractual safeguards.

  • Cloudflare

    Cloudflare runs the ClawLink application, its database, key-value cache, short-term storage for files agents upload, and the gateway in front of the playground model.

  • Composio

    Composio runs the hosted OAuth flow, holds provider access tokens and executes tool calls against the connected app.

  • Clerk

    Clerk manages sign-up, sign-in, sessions and multi-factor authentication for ClawLink accounts.

  • Polar

    Polar is the merchant of record. It processes subscriptions and card payments so ClawLink never handles card data.

  • PostHog

    PostHog receives usage events and session recordings for signed-in users. Inputs and sensitive fields are masked.