Permissions follow the person
Theoruma cannot take an action the initiating user is not allowed to perform.
Trust by design
Safety is part of the workflow, not a setting customers have to remember.
Theoruma cannot take an action the initiating user is not allowed to perform.
Meaningful changes remain private until they have been reviewed through the real rendering path.
Business-critical content stays in typed, inspectable records rather than arbitrary page-builder blobs.
AI prepares plans and drafts; permission-checked application services apply approved work.
Meaningful published changes retain attribution, audit history, and a recovery snapshot.
Uploaded source files remain scoped to the authorized organization and workspace.
The operating principle
Theoruma separates suggestions from production changes. High-impact actions such as publishing, permissions, domains, forms, and global design settings require explicit authority and validation.
A calmer way to manage the work
Bring your website, content, and review process into one clear workspace.