Security

Your board handles financials, contracts, customer data, and internal communications. Here's how agenté keeps all of it protected.

Data Isolation

Every account is fully isolated. Your documents, conversations, memory, and board configuration live in a dedicated space that no other customer can access — not through the board, not through the API, not through any internal tool.

Your data never trains a shared model. Your documents never become someone else's context. The board you calibrate is yours alone.

Encryption

Data is encrypted in transit and at rest.

• In transit — all connections use TLS 1.2+. Nothing travels over the network in plaintext.
• At rest — stored data is encrypted with AES-256. Keys are managed through a dedicated key management service, not hardcoded or shared.

Integration credentials (OAuth tokens, API keys) are encrypted separately and access-controlled. Even agenté engineers can't read them in plaintext.

Access Controls

Access to your data is governed by role-based permissions at two layers:

• Your team — Owner, Admin, Operator, and Viewer roles define who can see and do what within your account. See Account Setup.
• The board — scopes define exactly which systems and actions each seat can access. Nothing is granted by default. See Permissions & Integrations.

Both layers can be tightened or revoked at any time. Changes take effect immediately.

Audit Logs

Every action is logged. Every message sent, document accessed, integration connected, scope changed, permission granted — all recorded with a timestamp, the actor (human or board seat), and the outcome.

Audit logs are available to Owners and Admins from the dashboard. Export them for compliance reviews, security audits, or internal investigations. Nothing happens silently.

Infrastructure

agenté runs on enterprise-grade cloud infrastructure with:

• Continuous monitoring and anomaly detection.
• Regular third-party security assessments.
• SOC 2-aligned controls and practices.
• Automated backups with tested restoration procedures.

C-Suite tier adds dedicated infrastructure — your board runs on isolated resources with no shared tenancy, suitable for organizations with stricter compliance or performance requirements.

Your Responsibilities

Security is a partnership. To keep your account locked down:

• Use strong, unique passwords and enable two-factor authentication.
• Grant the board only the scopes it needs. Revoke access when roles change.
• Review audit logs periodically for anything unexpected.
• Remove access for departed team members immediately.

If you suspect a security issue, contact support from the dashboard. We treat every report as urgent.

What's Next

• Permissions & Integrations — configure scopes deliberately.
• Account Setup — set team roles correctly from the start.