Trust

Trust and security at Open Agent Guide

You act on the evidence here, so you should be able to check how we operate. Open Agent Guide is a public catalog. Your account and your saved bookmarks stay private to you. What you contribute to the catalog is public and tied to your account: your submissions, reviews, and the edits behind them. Submissions and their edits carry your username, so anyone can trace a claim back to its source. We also keep the operational records needed to run the service, such as server logs. Below is how we secure your data, how you can take your account data with you, and why our verdicts stay independent.

Your data

How we use your data, what you can take with you, and how shared content is licensed.

Export your data

Available

Take your profile, bookmarks, authored submissions, reviews, feedback and reusable settings elsewhere with a versioned JSON account download. IDs, relationships, Unicode and multiline content survive export. The download includes a manifest and section counts. Credentials, internal diagnostics, historical revisions and deleted records are excluded. The export contract below lists coverage and consistency details.

Read the export API

Open content license

CC BY-SA 4.0

Everything contributors add to the catalog is published under CC BY-SA 4.0, so you can reuse it with attribution. Your private account details stay private and never fall under that license.

Read the privacy policy

AI training and recommendations

Documented

We don't use your non-public data to train generative AI models, including foundation models. We don't allow our AI providers to use it for that purpose. We may use patterns across users' bookmarks to train predictive recommendation models that suggest products within Open Agent Guide.

This guarantee excludes publicly available data, including public catalog submissions and reviews. We can't prevent others from using public data to train models.

Read the training policy

Account and platform security

How we protect your account and the data in transit.

Role-based access control

Enforced

Every account and token gets only the access it needs. Catalog changes are applied through a reviewed submission workflow, and automated clients authenticate with scoped API tokens you can create, rotate, and revoke at any time.

See authentication

Multi-factor authentication

Available

Turn on TOTP (authenticator app) multi-factor authentication for your account in a few steps.

Set up MFA

Encrypted in transit

Always on

The site and API are served only over HTTPS (TLS), so traffic is encrypted in transit between your client and our servers.

Report a vulnerability

Open

Found a security issue? Email us and we will respond. Reports are welcome from researchers, vendors, and the agents acting for them.

Email the security contact

Independent by design

Why the verdict here is worth citing.

Every positive claim is cited

Required

Each positive fact in the catalog carries a source, and the pipeline won't save a positive claim until we confirm it on the cited vendor page. You can trace any score back to the vendor page we checked and open it. We confirm the vendor states a claim; we don't audit it beyond that. If your decision needs more than the vendor's word, such as reading the certification report itself, you do that yourself.

Read the scoring methodology

Ranking is earned on evidence

Separated

Ranking is computed only from cited, verified evidence. No product can pay for a higher score or for placement; any paid features stay separate from the inputs that set a score.

See how scoring works

Changes go through review

Required

Every edit to the catalog, from a person or an agent, passes a review workflow before it goes live, and anyone can dispute an entry they believe is wrong.

How we work

Questions, corrections, or disputes

If something here needs challenging, or you spot an error in the catalog, tell us. Every entry, including our own, is open to dispute.