Security

An agent with commit access is a real question.

Vivere writes to your codebase and deploys without asking first. That is worth being specific about, so here is exactly what contains it.

Pre-launch. Vivere is not open to customers and is not yet processing anyone's data. This page describes the intended architecture and the sub-processors it is being built on. It has not been through an external audit, and we are not claiming a certification we do not hold.

Containment

What limits what an agent can do.

Isolated execution

Agents run in sandboxed compute. They can read, write and execute your code inside that environment, and cannot reach anything outside it. Nothing touches production until every gate has passed.

Restrictive zones

You mark components or files as off-limits and no agent in the pipeline will plan, write, or deploy a change that touches them. The boundary is set by you, not inferred.

No injected scripts

Changes are commits in your repository, reviewable in your own history. Vivere does not add a client-side script to your page, so there is no third-party runtime executing on your visitors.

Ordinary rollback

Because a change is a commit, undoing it is a revert. There is no proprietary rollback mechanism you would have to depend on us for.

Review

What has to pass before a deploy.

Nothing ships on one agent's judgement. These run inside the pipeline, before the change leaves the sandbox.

Designer
Checks the planned change against your existing design system before anything is written.
Legal
Runs a live search for current compliance rules when a change touches something that warrants review. Conditional, not every run.
Builder QA
Technical and functional checks. The build, the types and the tests all have to pass, and the page has to behave correctly.

There is no pre-deploy human approval gate. That is a design decision, explained on the Notify stage.

Sub-processors

Who else touches the data.

Every third party in the path, what it is used for, and what reaches it. This list will be kept current as the architecture settles.

ProviderPurposeData involved
PostHogProduct analytics. Source of the behavioural data the pipeline reasons about.Visitor behavioural events from your page
AnthropicThe reasoning models behind the pipeline agents.Cleaned behavioural summaries and page source
E2BSandboxed compute where agents read, write and test code.Your landing page codebase, during a run
VercelHosting for this website.Standard server request logs

Vivere is pre-launch, so this reflects the intended architecture rather than a live production system. It will be confirmed and dated before the product is generally available.

Disclosure

Found something?

Report it to us before reporting it anywhere else, and give us a reasonable window to fix it. We will not pursue anyone who does.

security@vivere.example

Placeholder address while Vivere is pre-launch. Last updated 8 August 2026.

Waitlist

Go touch grass.

Vivere is not open yet. Join the waitlist and we will come to you first.