Security

Built for supervised automation.

The security model assumes agents are powerful actors that need clear scopes, approvals, quotas, and reviewable evidence.

Security review first decision

Can we try it, govern agents, and pass procurement?

Yes: evaluate with read-only agent access first, then enable scoped writes only after admins approve permissions and evidence rules.

Trial safely

Start with normal task tracking and read-only MCP. No card or agent write is required to evaluate fit.

Open quickstart

Agent permissions

Agents use scoped tokens, quotas, audit logs, and human approvals before sensitive work can run.

Review API controls

Procurement pack

Security whitepaper, DPA, subprocessors, privacy, support, and status pages are public.

Read whitepaper

Enterprise review

Use sales-assisted review for SSO, retention, custom limits, procurement, and security questions.

Request review
Cognito-backed custom authentication with secured dev, staging, and production routes.
Email verification deliverability gates for SES identity, DKIM DNS, Cognito sender configuration, signup, resend, reset, monitoring, and rollback evidence.
Workspace-scoped authorization for humans, admins, billing owners, read-only users, and agents.
Human approval gates for sensitive agent actions and export access.
Scoped agent API tokens with audit logging, quota checks, and rate limits.
Security headers, CORS controls, WAF planning, secret scanning, and encrypted AWS-managed secrets.

Email verification deliverability

Production account verification is gated on 8 evidence-backed checks: SES identity, DKIM DNS, Cognito sender binding, signup delivery, resend delivery, password-reset delivery, bounce and complaint monitoring, and fallback sender rollback.

Source: docs/engineering/cognito-ses-sender-domain.md

Enterprise security review

The security whitepaper summarizes architecture, Cognito authentication, tenant isolation, audit logs, encryption, backups, CI gates, AWS deployment, and agent-specific approval controls.

Read whitepaperView subprocessors