Isolated LXD container
Each agent runs in its own LXD Linux container that is only yours.
Architecture
The technical details behind your agent.
See how it works →The architecture, end to end
Here is the full path your request takes through AgentPod.
❯ How it actually works
Ask from the web app, Telegram or Slack. Your agent — OpenClaw or Hermes, your choice — drives a cloud Chrome that's already signed in as you, then gets real work done across Gmail, Calendar, Docs, Drive and more.
Security & isolation
AgentPod runs your agent in an isolated LXD container with backups handled for you.
Zero shared state
Containers do not share storage, network, or data, so user data stays separate.
Automatic backups
Your workspace and settings are backed up automatically so failures do not erase your work.
Per-tenant TLS & encryption
Each container gets HTTPS, and data is encrypted in transit and at rest.