Trust center
Security you can verify
How we protect your data, what we are certified for, and how to see every action your agents take.
Compliance
Independently audited
SOC 2Type II
Audited yearly by an independent firm across security, availability, and confidentiality.
ISO27001
Certified information security management, covering people, process, and technology.
GDPRCompliant
A signed DPA, EU data residency, and tools to handle data subject requests.
HIPAAReady
A BAA is available on Enterprise for teams handling protected health information.
Access control
Every agent gets only what it needs
Scope each agent to specific apps and actions. Anything sensitive waits for a person.
- Per-agent scopes for every connected app
- Approvals for sending, paying, and deleting
- Agents inherit the access of the person they act for
| Agent | CRM | Billing | Docs | |
|---|---|---|---|---|
| Revenue researcherSales | Write | Approval | No access | Read |
| Support resolverSupport | Read | Approval | Approval | Read |
| Invoice matcherFinance | No access | Read | Write | Read |
| Campaign writerMarketing | Read | Approval | No access | Write |
Your data
Your data stays yours
Encrypted everywhere
AES-256 at rest and TLS 1.3 in transit, with keys managed in a dedicated KMS.
Never used for training
Your prompts, files, and outputs are never used to train models, ours or anyone else’s.
Choose your region
Keep data in the US or EU, with retention periods you control.
Sub-processors
Who we work with
The third parties that process data on our behalf, and why.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Cloud hosting and storage | US, EU |
| Anthropic | Language model inference | US |
| Cloudflare | Network security and CDN | Global |
| Stripe | Payment processing | US |
| Postmark | Transactional email | US |
| Datadog | Monitoring and logging | US, EU |
Security FAQ
Security, answered
The questions security teams ask us most.
- Is our data used to train AI models?
- No. Your data is never used to train models. Our model providers are contractually barred from training on it or retaining it.
- Where is our data stored?
- In AWS data centers in the US or the EU, depending on the region you choose. Enterprise plans can pin data to a single region.
- Can we limit what agents can access?
- Yes. Every agent has its own scoped permissions, and agents only see what the person they act for is allowed to see.
- How do approvals work?
- You choose which actions need a human. Those steps pause and wait for approval in Agento, Slack, or email, with full context attached.
- Do you support SSO and SCIM?
- SAML SSO is available on Growth and Enterprise. SCIM provisioning and custom roles are available on Enterprise.
Ready to put agents to work?
Start free for 14 days. No credit card required.