Security architecture at a glance
Isolated tenants, scoped action broker, immutable audit log. The AI never holds raw credentials and never talks to a payment provider directly.
Ingress
TLS 1.3, WAF, rate limiting, bot filtering and per-tenant request signing on every webhook.
Agent runtime
Stateless inference in a per-tenant sandbox. No customer credentials in the model context — only short-lived scoped tokens.
Action broker
Every write goes through a policy engine that checks ceiling, eligibility, idempotency key and approval requirements.
Audit & retention
Append-only log with actor, policy version, confidence and payload hash. Exportable to SIEM, TTL-controlled per workspace.
Standard sub-processors
Customers are notified 30 days before any change. Full list available in the trust center.
Procurement questions we answer every week
Need the paperwork today?
Send us your security questionnaire and we'll return it completed, with the SOC 2 report under NDA and a countersigned DPA.