Does my data leave my server with Babuba?

No. The gateway, agents and database run on your machine. Data never goes to Babuba's cloud — you can even run fully air-gapped with no internet required.

Who owns the data and model keys?

You do. Root access is yours — model API keys live in your gateway's secret store, and the audit log is exportable any time.

What access controls does Babuba have?

Five-level RBAC with custom roles and per-resource permissions, guardrails with four modes (allow, deny, warn, require-approval) enforced before and after every model call, and approval gates on payments, exports and sends.

Is every agent action audited?

Yes. Every agent action is logged and searchable — who, what, when, and which rule allowed it. Export the log any time; roll back, fix the rule, move on.

Can Babuba run without internet access?

Yes — air-gapped deployment is supported. One command on a server or desktop, no internet required.

Babuba Ownership — Zero data leaves your server.

// OWNERSHIP SPEC

EVERYTHING YOU CONTROL.

DATA RESIDENCYYOUR SERVER. NOT OURS.

MODEL ACCESSBRING YOUR OWN — OPENAI / ANTHROPIC / DEEPSEEK / OLLAMA

ACCESS CONTROLRBAC + GUARDRAILS + APPROVAL GATES

AUDITEVERY ACTION LOGGED, SEARCHABLE, EXPORTABLE

DEPLOYMENTONE COMMAND — SERVER OR DESKTOP

NETWORKAIR-GAPPED — NO INTERNET REQUIRED

// SECURITY CONTROLS

DEFENSE IN DEPTH.

Not a chatbot with a password. A system with layers — identity, scope, rules, gates and logs.

RBAC

5 LEVELS

Super admin → viewer. Custom roles with per-resource permissions. Scoped per department and per agent.

GUARDRAILS

4 MODES

Allow, deny, warn, require-approval — per topic, per agent, enforced before and after every model call.

APPROVAL GATES

100%

Payments, exports, sends — nothing ships silently. Every gated action waits for a human tap.

AUDIT

FULL

Who, what, when, which rule allowed it — logged, searchable, exportable. Roll back, fix the rule, move on.

APPROVAL.GATE

NOTHING SHIPS SILENTLY

Agent prepares and verifies. The action lands on your phone with the full picture — one tap to approve, one tap to reject. Approval gates on payments, exports, sends.

AUDIT.LOG

EVERY ACTION, RECORDED

Every agent action is logged and searchable — who, what, when, which rule allowed it. Export the log any time. Roll back, fix the rule, move on.

SECRETS

KEYS STAY LOCAL

Model API keys, tokens and secrets live in your gateway's secret store — never in our cloud, never in logs. Per-agent scoping included.

access — example

[ask] $ babuba access --check asha finance.approve

[rbac] asha = viewer (level 1) → DENIED

[guardrail] payment action = require-approval pass → gate

[gate] escalates to finance admin (level 4) → notified

[audit] denied access logged · searchable

// DATA RESIDENCY

ZERO DATA LEAVES YOUR SERVER.

Invoices, ledgers, emails, employee records — they stay in your gateway's database on your machine. You can run Babuba fully air-gapped, with an on-prem model, and the system never touches the public internet.

data flow

[in] invoice INV-1044 arrives ← whatsapp

[store] written to gateway.db on your server

[model] prompt → your LLM key (or local Ollama)

[out] result → your database — never our cloud

// AUDITABLE BY DESIGN

EVERY AGENT SHOWS ITS WORK.

Each hop is logged on your server — who routed what, which agent did what, and what it asked before anything shipped.

REQUEST ▸ RBAC ▸ GUARDRAIL ▸ APPROVAL ▸ LOGGED ▸ APPROVED

// RBAC MATRIX

WHO CAN DO WHAT.

Five levels, per agent, per department. Assign by phone or Telegram ID — each user sees only what their role allows, and every decision is logged.

ROLE	LEVEL	TYPICAL SCOPE
SUPER ADMIN	5	Create agents, manage the gateway, all departments
ADMIN	4	Run an agent, approve its actions, manage its users
MANAGER	3	Approve within scope, view workflows and audit trail
USER	2	Use the agent — chat, requests, assigned tasks
VIEWER	1	Read-only — reports, dashboards, export requests

// NEXT

ONE LICENSE. YOUR WHOLE AI TEAM.

Unlimited agents, unlimited users, all channels, your server. One-time price — no rent, no per-seat fees.

SEE THE LICENSE ▸