LetThemBuild for teams

Verified AI engineering.

Every AI change is independently reviewed by other frontier models that re-run your build and tests on the same machine — and you get a receipt of exactly what passed. Not a model's opinion of its own work. Evidence.

A receipt, not a promise

One frontier model leads: it edits files, runs commands, builds. Then the others review — and they can run the same build and tests themselves. Each check is recorded from what actually executed: the command, its exit code, the result.

Agreement without a check is visible as agreement without a check. Agreement despite a failing check is flagged. Nothing is marked done until every reviewer genuinely endorses it — with evidence.

Verification receipt

3 of 4 checks passed — not agreed

Claude led. Three reviewers re-ran the work on the same machine. What they ran and what came back:

ChatGPT$ npm testexit 0142 passing
Gemini$ npm run buildexit 0compiled, 0 warnings
Grok$ npx tsc --noEmitexit 0no type errors
ChatGPT$ npm run lintexit 12 errors in auth.ts

A reviewer that says “looks good” without running anything is shown as exactly that. A reviewer that agrees despite a failing check is flagged as a contradiction. The receipt is built from what ran — never from what a model claims it ran.

How a change gets verified

Lead

Claude, ChatGPT, Gemini or Grok — your choice — works in an isolated git worktree of the repo: reads, edits, builds, tests. Your checkout is never touched.

Review

The other models get read-only tools on the same machine. They open the files, re-run the build and tests, and object with specifics — or agree, with the command that convinced them.

Receipt

You see who ran what, what came back, and whether the room agreed. Merge, open a PR, or send it back — the decision is yours, and it is an informed one.

Security & compliance

The facts a security review needs, stated plainly. Where something is in progress, it says so.

Your code can stay on your machine

On LetThemBuild with your own API keys or your own coding CLIs, prompts and code go from the developer's machine directly to the model provider — they never transit our servers. This is the default for teams that bring their own keys.

Isolated worktrees, never your checkout

Every session runs on its own git branch in a separate worktree. The developer's working copy is untouched until they choose to merge or open a PR.

Encryption at rest

Any credential we hold (managed-mode or team-shared provider keys) is encrypted with AES-256-GCM. On the desktop, keys are protected by the operating system's own credential store (macOS Keychain; Windows DPAPI) and never leave the machine.

Managed keys, zero training

With our keys, prompts are sent to providers under their API terms — not used to train models. Our provider list is published on the privacy page. Teams that need no transit through us at all use their own keys or CLIs on the desktop, where that is the architecture rather than a policy.

Team administration

Owner / admin / member roles. Centralized billing to one account. Shared team keys that fill seats members have not keyed. Per-seat monthly and daily budgets with alerts at 80% and 100%. A policy that makes every discussion a ticket in a team project, a ceiling per discussion, and spend rolled up by project, release and ticket. Shared workspaces with author-only controls.

Audit trail

Every session keeps its full transcript, every command reviewers ran and its exit code, and every verdict. Each discussion exports as a hash-chained log with a digest an auditor can recompute, so a changed or missing message shows; organization-wide export and SIEM streaming are on the enterprise roadmap.

Single sign-on

in progress
Google Workspace and Microsoft Entra sign-in are live. SAML SSO and SCIM provisioning for Okta and other IdPs are the next enterprise deliverable — tell us which you use.

SOC 2 Type II

in progress
Our controls are being built to SOC 2 criteria and the formal audit is on our roadmap; we do not yet hold a report. For evaluations that need it now, we provide a security questionnaire response and a signed DPA.

You choose who pays for the models

BYOK

Each seat on your organization’s own provider accounts. No markup, and on the desktop, no transit through us.

CLIs you already pay for

Claude Code, Codex, Gemini CLI, Grok Build — reviewers run on the subscriptions your developers already have.

Our Keys

One bill, prepaid credit, tokens at provider cost plus 10% for serving them. Zero setup for a pilot; per-seat budgets keep it predictable.

Team seats are $40 per member per month, everything included. See pricing. Enterprise agreements (SSO, audit export, DPA, self-hosted sync) are priced per organization.