Trust center
Security You Can
Check, Not Just Read.
Everything below is labelled as in place, in progress or planned. If a control is not built yet, we say so here before a security questionnaire has to find it.
Isolation and access
- Tenant isolationin placeTenant scope comes from the server session or a hashed credential, never from the request body. Cross-tenant reads are covered by automated tests.
- Role-based accessin placeSix roles enforced on the server for every request. Nobody can approve an action for a task they started.
- Hashed credentialsin placePasswords use scrypt. Agent keys, API tokens, sessions, invites and reset links are stored only as hashes and shown once.
- Single sign-on and SCIMplannedOkta and Microsoft Entra on Business and Enterprise.
- Two-step verificationplannedArrives with single sign-on.
Decisions and enforcement
- Deterministic decisionsin placeThe same action and policy set always produce the same answer. No model makes enforcement decisions.
- Signed, expiring decisionsin placeDecisions are HMAC-signed over tenant, agent, payload hash and expiry.
- Payload-bound approvalsin placeApproval covers one exact payload and policy version, expires, and cannot be replayed.
- Kill switchin placePer agent and organization-wide. The supervised agent cannot reach it.
Audit and data handling
- Tamper-evident audit trailin placeEvery event carries the hash of the one before it. Verification runs on demand.
- Redaction at write timein placeSecrets, tokens and card-like fields are removed before anything is logged; emails are masked.
- Configurable retentionin placeRetention follows your plan; records are deleted on schedule.
- Encrypted persistent storagein progressThe pilot build keeps state in memory. Production storage with encryption at rest is next.
Assurance
- Threat modelin placeCovers tenant breakout, credential theft, replay, forged approval, policy and audit tampering, prompt injection and enforcement bypass.
- Independent penetration testplannedBefore any customer runs production enforcement.
- SOC 2plannedNot audited yet. We will publish the report scope and dates here when an audit starts.
Documents
For your review.
Security and trust boundaries
What is protected, outage behavior and known limits.
Data processing agreement
How we process personal data on your behalf.
Subprocessors
Every third party that touches data, and why.
System status
Live checks of the decision path and audit chain.
Privacy Policy
What we collect and how long we keep it.
Terms of Service
The agreement for using AgentPlane.
security.txt
How to report a vulnerability.
Docs: limits and guarantees
What the API promises, and what it does not.