Three AI agents that handle logins and payments disclose different approaches to holding the keys
Skyvern and 11x's Alice collect and retain login and payment credentials to run tasks; Viktor says it never lets its model see the keys at all.
Three AI agents that complete tasks requiring logins or payment details disclose different practices for handling those credentials, according to privacy and security pages reviewed in AI Dispatch's index this week.
Skyvern, a browser-automation agent that logs into web portals to complete workflows on a user's behalf, lists among the data it processes to run a task "account login credentials, including usernames and passwords for third-party websites and services" and "financial information, including credit card numbers and billing information," per its privacy policy.
11x, which sells an AI sales agent called Alice that operates from a connected email account, discloses that it keeps a copy of those credentials: "we do store all email accounts or email account passwords we use to provide our services via your email servers encrypted," its privacy policy states.
Viktor, a separate workflow-agent vendor, describes a different architecture on its security page. API keys and OAuth tokens are injected through a server-side "tool gateway" at the moment a task executes and held in an encrypted vault rather than passed to the underlying model — "the model never sees them," the page states.
The difference sits inside what AI Dispatch's trust-gap rubric scores as runtime governance: whether an agent's access to credentials or funds is enforced automatically, independent of policy language. 11x's Alice carries a human-reviewed score of 0 out of 3 on that dimension, the rubric's lowest; Viktor scores 2. Skyvern's audit-trail dimension — whether its actions are logged in a tamper-evident, customer-reviewable record — is scored 1, also within the rubric's trust-gap range.
None of the three companies' public-facing pages reviewed — 11x.ai, Skyvern.com and Viktor.com — contain any mention of insurance coverage, indemnification or a liability cap specific to credential or payment-data misuse. All three are recorded as carrying no public information on those fields in AI Dispatch's index.
Entries in this piece 3
Published index entries backed by the same source documents this piece cites.
Sources 9
“Account login credentials, including usernames and passwords for third-party websites and services; Financial information, including credit card numbers and billing information;”
www.skyvern.com · checked Sep 29, 2026“Also we do store all email accounts or email accounts passwords we use to provide our services via your email servers encrypted.”
11x.ai · checked Sep 29, 2026“the model never sees them”
viktor.com · checked Sep 24, 2026“A full-text search of this capture (11,978 characters, fetched 2026-08-08 from viktor.com) found no occurrence of insurance, indemnification, liability, warranty, underwrite or carrier.”
viktor.com · checked Aug 8, 2026“insurance_available, insurance_carriers, coverage_limits, indemnification and liability_cap are recorded as no_public_information in entity_fields for Viktor, evidenced against this capture of https://viktor.com retrieved 2026-08-08.”
viktor.com · checked Aug 8, 2026“A full-text search of this capture (9,450 characters, fetched 2026-08-01 from 11x.ai) found no occurrence of insurance, indemnification, liability, warranty, underwrite or carrier.”
11x.ai · checked Aug 1, 2026“insurance_available, insurance_carriers, coverage_limits, indemnification and liability_cap are recorded as no_public_information in entity_fields for 11x Alice, evidenced against this capture of https://11x.ai retrieved 2026-08-01.”
11x.ai · checked Aug 1, 2026“A full-text search of this capture (5,736 characters, fetched 2026-08-08 from skyvern.com) found one occurrence of the substring "liabilit" inside the word "reliability" — not a reference to legal liability — and no occurrence of insurance, indemnification, warranty, underwrite or carrier.”
www.skyvern.com · checked Aug 8, 2026“insurance_available, insurance_carriers, coverage_limits, indemnification and liability_cap are recorded as no_public_information in entity_fields for Skyvern, evidenced against this capture of https://www.skyvern.com retrieved 2026-08-08.”
www.skyvern.com · checked Aug 8, 2026