ENTERPRISE-GRADE SECURITY, BUILT IN
Sandbox isolation, scoped credentials, multi-tenant architecture, and a complete audit trail.
Security at Every Layer
Six layers of security that protect your data, your credentials, and your peace of mind.
Sandbox Isolation
Every run executes inside an isolated container that is destroyed after completion. No shared state, no residual data, no cross-contamination between runs.
Credentials Architecture
API keys and secrets never enter the sandbox. The platform makes external calls on behalf of employees, keeping credentials in a secured vault.
Scoped JWTs
Every run receives a unique JWT scoped to the specific tenant and run ID. Tokens expire after 30 minutes with no renewal.
Multi-Tenant Isolation
Every database query is scoped by tenant ID. No cross-tenant access is possible at the data layer, enforced by middleware.
Audit Trail
Every tool call, action, decision, and output is logged with full context. Complete traceability from input to output for every run.
Rate Limiting
Per-tenant rate limits prevent abuse. Idempotent job design ensures safe retries. No runaway processes, no unexpected costs.
Built-In Safety Net
Six non-optional guardrails that protect your business. These cannot be disabled -- they are part of the platform.
Budget Cap
Run terminates automatically when credit limit is reached. No overages, ever.
Action Limit
Maximum N actions per run. Prevents infinite loops and runaway operations.
Kill Switch
PAUSE ALL button instantly stops every running employee across your organisation.
Anomaly Detection
Auto-pause on unusual patterns -- unexpected volume, new tool usage, or authority escalation.
Undo Window
29-second window for reversible actions. Cancel before changes take effect.
Cool-Off Period
Daily summary emails for the first 7 days. See exactly what your employees are doing before they go autonomous.
Compliance Ready
SOC 2 Type II
Security, availability, and confidentiality controls aligned with SOC 2 requirements.
GDPR Compliance
Full GDPR compliance with data processing agreements, right to erasure, and data portability.
Data Residency
Choose where your data is stored. EU, US, and APAC regions available for enterprise customers.
Questions About Security?
Our team is happy to walk you through our security architecture, share compliance documentation, and answer any questions.
No credit card required.