How Auto Capture protects your sign-in details

What we store

For each credential you add, we store its name, the sites it is used on, an email address and a password. The email address and password are encrypted before they are written to storage. We keep only the encrypted copy.

If you connect 1Password, we store which vault and item to use, not the contents of the item. We read the item from 1Password each time a capture runs, so a changed password takes effect on the next capture. Your 1Password service account token is encrypted in the same way as a password.

After you save a password, it cannot be viewed again, by you or by Tella staff. To change a password, remove the credential and add it again.

Encryption

Credentials are encrypted with AES-256-GCM using a key reserved for Auto Capture. The key is held in hardware security modules validated to FIPS 140-3, cannot be exported from them, and is rotated regularly.

The part of Tella that saves your credentials can encrypt them but cannot decrypt them. Each encrypted value is bound to the credential it belongs to and cannot be used in place of another.

Access to your credentials

Only the Tella service that runs captures can decrypt your credentials. It decrypts a credential only for a running capture that is authorized to use it, and that authorization expires after a short time.

If you connect 1Password, the same service also uses the connection's token to list its items when a login is chosen in Settings.

No Tella employee is granted permission to decrypt your credentials. Every decryption, and any change to who is permitted to decrypt, is recorded in an audit log.

What the AI can see

The AI that operates the browser never receives your password. Your password is entered only on the sites you listed for that credential.

The AI does see your email address and the pages of your product that it visits, including anything shown after it signs in. We recommend using an account that can access only what you want recorded.

Captures use Anthropic's Claude by default, or an OpenAI model if one is selected for the capture. These providers receive screenshots and page text so the AI can decide what to do next. They never receive your password.

Sign-in codes

If a personal credential needs a one-time code, the capture pauses and asks the person who started it. The request reaches you as a link to a page on Tella, through the AI assistant you used to start the capture. Only you can see or answer the request.

Tella never asks for sign-in codes by email. If you receive an email asking for one, do not enter it.

A code is encrypted as soon as you submit it and can be used once. It is deleted as soon as your capture uses it. Each request expires within 15 minutes. After that, an unused code can no longer be used, and it is deleted by automatic cleanup, usually within a few days.

Workspace credentials cannot request codes, because the code would come from a shared inbox rather than from one person.

If a 1Password item includes a one-time password, Tella generates each code on its own servers, for personal and workspace credentials alike. The underlying secret never reaches the browser.

Where captures run

Captures run on Tella's own infrastructure in Amazon Web Services, in the US East (Ohio) region. We do not use a third-party browser service.

Each capture runs in its own browser with its own profile. Both are deleted when the capture ends. Any signed-in session or browser data a capture keeps between steps is encrypted and deleted when the capture ends.

Recordings

Password fields are masked in recordings. If a capture records its sign-in, your email address appears wherever your product displays it. You can trim the sign-in from the video in the editor.

Managing credentials

A personal credential is used only by captures you start. A workspace credential can be used by captures started by anyone in the workspace, and only workspace owners can add or remove one.

A 1Password connection is either yours or the workspace's. Logins you add from your own connection are personal credentials. Only workspace owners can connect or disconnect a workspace connection and add logins from it, and those logins are workspace credentials. A personal credential never reads through a workspace connection, and a workspace credential never reads through a personal one. Disconnecting a connection deletes every credential that uses it.

When you remove a credential, it is deleted immediately and no new capture can use it. A capture already in progress can finish with the credential it has. Encrypted backups of our database retain the encrypted copy for up to 35 days.

Deleting your account

When you leave a workspace or delete your Tella account, we delete your personal credentials and personal 1Password connections. Workspace credentials and workspace 1Password connections stay with the workspace, including ones you added. When a workspace is deleted, its workspace credentials and 1Password connections are deleted with it. Encrypted backups of our database retain encrypted copies for up to 35 days.

Logging

Our logs record which credential a capture used and when. They never record the credential itself.

Limits to be aware of

A one-time code you enter is typed into your product's sign-in page, where the AI can see it. Codes are single-use and expire within minutes.

Anything your product displays to a signed-in user can be seen by the AI and may appear in the recording. Choose the account you save accordingly.