moraWhat we read
Only the tools, databases, files and code repositories you connect, and only to read them. Nothing is ever written, changed or deleted in your systems.
- Tools are authorized on the tool's own page. GitHub goes through Mora's own GitHub App, read-only, on the repositories you choose.
- Databases are connected with a read-only user. Mora tests the access before saving it and refuses one that can write.
How it works
The work is done by an AI agent we built, on a private machine. Its job is to find whether your data could become something an AI lab would license, such as a training environment for AI models.
- A private machine with no internet. It cannot reach any website or service. It reaches the sources you connected, read-only, through Mora, and only those.
- Secrets are removed from code. Code is copied without its git history, then an offline script blanks every key, password, token and environment value before the agent reads it. A key it still found would be useless: the machine cannot connect anywhere.
- Our privacy filter comes first. Names, emails, phone numbers and ids are replaced by generated aliases in everything the agent and the language model read.
- A schema, after several passes. The agent works on small samples and refines a proposed schema over several iterations. A full read starts only if the data is worth it and a person at Mora has reviewed it.
- At the end, everything is deleted. If the data is worth it, only a small set of example records (JSONL) is kept, to show AI labs, and only with your consent. If it is not, nothing is kept.
Who sees it
Only Mora's team. No lab sees anything until you agree, and your company's name is never shown to a lab, not even after a deal.
AI training
Nothing you connect is used to train an AI model, by Mora or by its providers. Your data reaches a lab only under a license you sign, and only that lab.
Providers
- Cloudflare: Hosts Mora, the private machine our AI agent works on, and its temporary storage.
- Nango: Connects your tools when you authorize them, and holds the access tokens. Mora never sees your passwords.
- OpenAI: The language model our agent calls. It only receives text that went through our privacy filter, and does not train on it.
- Clerk: Sign-in: your email and session.
- Neon: Mora's own database: your account, company name and listings.
- Slack: Notifies Mora's team when a read needs review. Summaries only, never your records.
Your controls
Remove a connection in Mora or in the tool itself, and Mora stops reading from it at once. You can ask us to delete the example records, or anything about your company, at any time.