Security

What is in place today, and what is not yet.

This page lists only what the portal does now. For how agents are held to a person's approval, read Governance.

What is in place

  • Tenant isolation: another organisation's record answers exactly as a missing one does, with the same 404.
  • Roles and a permission table that every action is checked against. The roles are explained on the portal's People page.
  • CSRF and Origin checks on every change made from the browser.
  • One-time links for invitations and password resets.
  • Secrets (SSH keys, tokens, connection headers) are encrypted at rest and never printed back.
  • Git is read over SSH with your keys, fetch only. The portal never writes to a repository.
  • On a merge request the portal posts comments and commit statuses, and nothing else.
  • The Actions log records the exact arguments, who decided, when, and the outcome of every asks-first call. The agent's memory log records what a goal did.
  • An approval-policy option, so an organisation can require that the person who started a goal is not the one who approves its actions.
  • Resetting a password can revoke that person's access tokens.
  • Password rules, and sign-ins slow down after 5 failed tries (up to 5 minutes).
  • Hosted in Sydney, Australia (AWS ap-southeast-2).

Not yet

We would rather say so than imply otherwise.

  • Single sign-on (SAML or OIDC) and SCIM provisioning.
  • Multi-factor authentication.
  • Audit export: the records above are on screen, not yet downloadable as one file.
  • Data retention settings, and organisation export or deletion.
  • An independent penetration test.
  • SOC 2 and a data processing agreement.

Who processes your data

Two parties for the portal itself. The hosting region is AWS in Sydney, Australia. The model is the one you configure; until you configure one, it is the portal's own model, which is named on the portal's Settings, Models page.

When you connect them, data also goes to your own services: your Slack workspace, Discord server or Teams tenant, your Git host (GitHub or GitLab), the MCP servers you add as tools, and the memory provider you choose.

Report a vulnerability

Use the contact form and tick Security. Say what you found and how to reproduce it. We read every message.