Create & publish
Voice profileYour style card, exemplars and registersCycles & captureA month planned, or a photo and one lineTopic RadarNews worth posting, ranked against your voiceReview & approveOne inbox. Nothing publishes without youEmail add-insOutlook and Gmail, straight from your inboxGrow & prove
EngagementHooks, first comment, mentions, timingPromote & Hook LabTest openings as small ads before you postAccount targetingPaste 200 companies, see who actually saw itPost to pipelineLeads and cost per lead, per postPublishing & schedulingOfficial APIs, on the slots you chooseThe compliance deskTEAM+Nothing publishes until you approve it. Enforced in code.
Most tools put their safety story in the terms of service. We put ours in database constraints and code paths that cannot be configured away.
These are architectural properties of the product. No plan, setting, or admin permission changes them.
Publishing requires an explicit approval recorded on that specific post, and the publish code re-verifies it at send time. There is no auto-post mode — not hidden, not enterprise-only. It does not exist.
Only you can approve or publish to your personal accounts. The database schema cannot express a role that grants someone else that power — the table linking roles to accounts simply has no path to personal identities.
Company pages use role-based approval (Drafter / Approver / Page-admin). Every approval, publish, role change, and account connection writes an audit record.
Official OAuth APIs only. No cookie-based authentication, no browser automation, no feed scraping, disclosed bot identity on Reddit. If a platform doesn't sanction an action, Avatorial hands it to you instead of doing it behind your back.
You connect LinkedIn and Reddit through the platforms' own consent screens. Avatorial never sees or asks for a platform password, and never reuses your browser session.
Platform tokens are stored in Google Secret Manager, referenced — never stored — by our database. Disconnecting an account destroys the secret.
Revoke Avatorial's access from LinkedIn or Reddit settings and it's over — publishing stops immediately; approval checks fail closed.
All infrastructure runs on Google Cloud in the EU (Belgium, europe-west1): application, database, media storage, AI processing via Vertex AI in-region.
Your writing history is used only to build your own voice profile. It is never used to train shared or third-party models, and never shown to other customers.
Nextarp B.V. (Rotterdam, NL) is the processor; you remain controller of your content. Self-service data export and one-click workspace deletion in-app; lapsed workspaces auto-purged after 60 days. Sub-processors: Google Cloud (hosting, AI), Stripe (payments), Microsoft and Google (sign-in), Resend (email). Full list and retention periods on the privacy page.
Every query is automatically scoped to your organisation at the data-access layer — isolation is injected by the platform, not remembered by each developer.
Authentication via Microsoft Entra ID or Google (OpenID Connect, any organisation). No passwords stored; sign-in issues a fresh session each time. Roles live in the application, never derived from directory groups.
Content-Security-Policy and HSTS on every response, per-user rate limiting on generation, cross-origin request rejection, signature-verified payment webhooks, uploads validated by file signature, encrypted transport everywhere, structured audit logging with CSV export.
Security questions or disclosures: info@nextarp.com
Read the invariants, then test them on your own account — free for 14 days.
Start free trial →