Engineering data security.

Deployment, data protection, and access controls for engineering teams.

SOC 2®

Bring your own cloud (BYOC): Deploy the platform in your own cloud account and apply your organization’s network and access policies.
Single-tenant deployment: Application services and storage are dedicated to your organization and isolated from other tenants.
Zero data retention for model inference: AI providers do not retain any customer data processed under zero data retention (ZDR).
Encryption in transit and at rest: Data sent to and from the hosted platform is encrypted in transit. Dedicated file storage is encrypted at rest with a key specific to your organization.

Multi-factor authentication: Users can set up an authenticator app in account settings to verify sign-ins.
User and group permissions: Access to supported projects, chats, workflows, and apps can be granted or revoked for individuals or groups. Permissions govern who can view, edit, or manage each resource.
Agent and connector access: Agents operate within the permissions granted for each run. In supported hosted chats, external actions that require approval wait for an authorized user’s decision before they run.
Audit trail and run history: Authorized administrators can filter and export security events, including sign-ins and active group changes. Workflow run history records the revision, status, and timing of each run.
Usage controls: Organizations on eligible plans can review analysis credit usage, set user allowances, and configure alerts in the Control Panel.