Security & trust
Agents your security team can sign off on.
Least-privilege access, approvals before risky actions and a complete audit trail — on infrastructure that’s independently audited every year.
SOC 2 Type II
Audited annually by an independent firm
ISO 27001
Certified information security management
GDPR
Data processing agreement for every customer
HIPAA
Business associate agreement on Enterprise
Reports and our latest penetration test summary are available under NDA.
Identity & access
SAML SSO with Okta, Entra ID and Google
SCIM provisioning and deprovisioning
Role-based access with custom roles
Enforced MFA and session controls
Data protection
AES-256 encryption at rest, TLS 1.3 in transit
EU or US data residency
Customer-managed keys on Enterprise
PII redaction in traces and configurable retention
Agent guardrails
Scoped tool permissions enforced at runtime
Approval gates by amount, action and confidence
Rate limits, budgets and a global kill switch
Shadow mode for every new version
Monitoring & response
Immutable audit log with SIEM export
Anomaly alerts on unusual agent behaviour
24/7 on-call with a 1-hour P1 response
Annual third-party penetration tests
01
Request
The agent proposes a tool call with its reasoning.
02
Scope
Is this tool and action granted to this agent?
03
Policy
Do limits, budgets and data rules allow it?
04
Approval
Above a threshold? A person decides.
05
Execute
Runs with scoped, short-lived credentials.
06
Record
Inputs, outputs and approver are logged.
Security questions
Answers for your security review.
Need our questionnaire responses, a DPA or a call with our security team? We’ll get you what you need.