Which agents work with it?

Any agent that reads skills from a directory. Claude Code, Codex and Gemini CLI read it natively; Cursor and VS Code connect over MCP.

The voice runs on your own machine, so there is nothing to meter. The first run downloads it, about 340 MB.

Yes. The skill is MIT-licensed and the authoring format is public.

Security and privacy at Bisque

Your agent writes on your machine. Bisque receives only what you publish: the page, its images, its audio and the notes you attach. Your prompts, your conversation and the files your agent read stay between you and your model provider.

This page covers what Bisque stores, who else receives it and when, and the controls Bisque offers.

Report a security problem: hello@bisque.today · Last updated October 28, 2026

Sign-in: Google or Apple, no passwords
Hosting: Google Cloud, us-central1 (Iowa)
Data location: United States
Encryption: At rest and in transit
Training on your content: None, on any plan
Subprocessors: 7, listed below

Your content

Bisque receives only what you publish, whether you use the present skill, the Artifacts skill or the connectors in Claude and ChatGPT.

Stays on your machine

Your prompts and the conversation with your agent
The files and repositories your agent read
The narration, when you publish with the present skill. An open-source voice model makes it on your machine, and if that model is missing, publishing stops instead of sending the script anywhere else.

Stored with Bisque, on Google Cloud

The page, its images and its narration audio
context.md and design.md, only when you attach them
The title, description and who it is shared with
Each version of an Artifact, and its comments

Shared with other companies

OpenAI, when a viewer uses Ask: the presentation's title, description, transcript, up to 24 KB of context.md, and the question
ElevenLabs, when you choose one of its voices, and each time you save a recording of your own voice
Gmail and Apple or Google push, for comment notifications: up to 200 characters of the comment
Stripe, when you pay for Plus, buy an Artifact or set up payouts

Product security controls

Sign in with Google or Apple: You sign in with your Google or Apple account, through Firebase Authentication.
Artifacts are private until you share them: A new Artifact is private by default. You can then share it with specific people, with everyone in your company, or make it public.
Four ways to share a presentation: Private, your company, unlisted or public. Anyone with the link can watch an unlisted presentation, but it doesn't appear on your channel or in Bisque's listings. A public presentation appears on your channel.
API keys you can revoke: Bisque stores a hash of each key, never the key itself. Each key shows when it was last used, and you can rotate or revoke it. A key can use your whole account's API.
Short-lived connector sign-ins: When you connect Claude or ChatGPT, the access token lasts 1 hour and only covers presentations. The refresh token lasts 90 days.
Your company's viewers, by name: The viewer report on a company presentation shows the name of each signed-in viewer. People outside the company can't open it.
Link passcodes and expiry: Presentation links don't have passcodes or expiry dates. To end someone's access, change who the presentation is shared with. A copy someone already downloaded stays with them.
SSO, SCIM and audit logging: Companies sign in with Google or Apple accounts. Bisque doesn't support SAML or automatic provisioning, and doesn't keep a log of sign-ins or sharing changes.

Infrastructure security

Google Cloud and Firebase: The web app, the database and file storage run on Google Cloud in us-central1, Iowa. Google encrypts stored data by default, and every connection uses HTTPS.
Artifacts run on their own domain: Each Artifact runs in a sandboxed frame on its own subdomain of artifacts.execution.run. Code in an Artifact can't reach your Bisque session or any other Artifact.
Private files behind signed links: Files for private and company presentations are served through signed links, never from a public address. Making a presentation private removes public access to its files.
Payments through Stripe: Checkout is hosted by Stripe. Bisque never sees your full card number; it keeps only the card brand and last four digits.
Data residency: Bisque stores your data in the United States.

Compliance

SOC 2 report: Bisque doesn't have a SOC 2 report. Google Cloud has its own SOC 2 and ISO 27001 reports, which cover the infrastructure but not Bisque.
Penetration testing and bug bounty: Bisque hasn't commissioned a penetration test and doesn't run a bug bounty. You can send security reports to the address below.

AI governance

No training on your content: Bisque doesn't train models on your data, on any plan, and doesn't build embeddings or a search index from it.
Ask uses OpenAI: Ask answers viewers' questions about a presentation using OpenAI's gpt-4o-mini. It's on by default for personal presentations and off by default for company presentations.
Server narration: When a presentation created through the API or a connector has no audio of its own, Bisque narrates it, or ElevenLabs does when you choose one of its voices.

Privacy

The Privacy Policy and Terms of Service have the full terms.

Data retention and deletion

Deleting a presentation: Deletes the presentation and its files.
Deleting an Artifact: Moves it to Trash, where you can restore it for 30 days. After that, Bisque deletes it along with its versions, comments and attachments. An Artifact someone bought stays available to its buyers.
Closing your account: 30 days after you close your account, Bisque deletes your profile, your personal presentations and your personal Artifacts. Company presentations and Artifacts stay with the company. Stripe keeps payment records for tax.

Subprocessors

The companies that receive your content, what each receives and when.

Company	Receives	When
Google Cloud and Firebase	Everything Bisque stores	Always
Google Analytics	Page addresses, watch time, your account id when signed in	Every page
OpenAI	Title, description, transcript, up to 24 KB of context.md, the question	A viewer uses Ask
ElevenLabs	Narration text; your saved voice recording	You choose an ElevenLabs voice; you save a voice recording
Gmail	Notification emails, with up to 200 characters of a comment	Comment notifications
Apple Push and Firebase Cloud Messaging	Up to 200 characters of a comment	Push notifications
Stripe	Email, company, seats, purchases, payout details	Paying customers and sellers

Security contact

hello@bisque.today

Report a security problem, or send a security questionnaire, to this address. A person reads every message.