Your keys.
Your voice. Your data.
Every API key is encrypted at rest with AES 256 GCM. Your samples and rules stay private. Your posts stay yours.
Privacy is a product decision.
Rook Signal is built around one idea: your voice should never leave your hands.
Encrypted. Masked. Unretrievable.
When you paste an API key, Rook Signal encrypts it with AES 256 GCM before it touches the database. The browser never gets the full value back. Not in the UI. Not in the network tab. Never.
- AES 256 GCMThe modern standard for authenticated encryption. No custom crypto.
- Masked in the UIThe dashboard shows only the prefix and the last four characters.
- Mismatch detectionA wrong key format triggers an immediate warning.
Your words. Your samples. Your archive.
The three samples you paste to train your persona are treated as private. They are never shared between workspaces, never pooled for training, and never sold. The archive of your comments belongs to you alone.
- No poolingPersonas are isolated per workspace.
- No training on your voiceYour samples improve your drafts. Not anyone else's.
- CSV export any timeYour history travels with you if you ever leave.
The quiet work of keeping you safe.
Security is boring when it works. Here is how it works.
AES 256 GCM
Authenticated encryption for every key. The modern standard.
BYOK first
Bring your own Anthropic, OpenAI, Google, Groq, or xAI key. We never share one.
Masked always
The full key is never returned to the browser. Not once, not ever.
Rook ID backed
Authentication lives on a shared Rook ID layer. One identity across every Rook product.
Scoped access
Workspaces are sealed. Team roles limit what every member can see and do.
Remove in a click
Delete a key. Revoke it. Rotate it. No hidden copies anywhere.
Questions.
How your keys, samples, and archive are kept safe.
Quiet by design. Safe by default.
Your voice is the most valuable thing on your LinkedIn. Rook Signal treats it that way.