Built to be trusted with production data, honestly described
We're a startup, not an enterprise incumbent, and we'd rather tell you exactly where our security program stands today than oversell it. Here's what's already in place, and what's still on the roadmap.
Encryption everywhere
Every request to the platform is encrypted in transit, and all stored data — prompts, traces, and tool responses — is encrypted at rest using per-tenant keys.
Per-tenant isolation
Your agents, traces, and connected tool credentials live in isolated storage scoped to your workspace. Nothing is pooled or shared across customers, including on the free beta tier.
Least-privilege by default
A new agent starts with zero tool access. Every connection — a database, an API, an email account — is granted explicitly, and can be scoped to read-only or specific actions.
Full audit trail
Every tool call, policy decision, and human approval is logged with a timestamp and actor, exportable for your own compliance review or incident response.
A roadmap, not a certifications page
A lot of startup security pages list badges that are technically true but practically meaningless at an early stage. We'd rather show you exactly what's shipped, what's in progress, and what's still planned — and update this page as it changes.
Compliance roadmap
Security FAQ
Not yet — we're an early-stage startup and our SOC 2 Type I audit is in progress. We publish our compliance roadmap openly rather than implying certifications we don't have yet, and we're happy to share our current security posture in detail on a call.