Security
Automate systems with no API without losing control.
The agent runs in your environment. Credentials stay in your vault. Every step is logged.
What a security review asks.
The questions we hear first, answered the way we answer them in a review.
Where does data go?
Screen content, field values and files stay on the worker VM in your environment. Telemetry carries status and timing, not data.
Who holds credentials?
Your vault or ours, encrypted at rest. Workflows reference a secret by name; the worker resolves it at run time.
What network exposure does the agent add?
None inbound. The agent opens an outbound TLS connection and receives work over it. No listening ports, no VPN.
How is tenancy isolated?
Every route, workflow, credential and agent connection is bound to one tenant. Auth0, with SSO for B2B tenants.
Can destructive actions be gated?
Yes. Destructive actions require an explicit confirmation, and you choose where the gates go in saved workflows.
What compliance evidence exists?
SOC 2 Type 1 and Type 2 audits, ISO 27001 certification, a third party penetration test, GDPR readiness and HIPAA readiness with a BAA. Reports and certificates are shared under NDA.
The worker
One VM. Outbound only.
The agent runs an unattended session on a dedicated worker VM inside your network, reaches the systems it operates, and opens nothing inbound.
How it executes →Worker
worker-01 · connected
- Windows Server 2022 · signed installer
- outbound only · TLS 1.3 · 0 inbound ports
- unattended session · dedicated VM
Capabilities
- browser
- desktop
- terminal
- file
- ldap / ad
Systems reached today
- DealerCONNECTbrowser14
- Dealertrackbrowser9
- DMS thick clientdesktop6
- On-prem ADldap22
- Report sharefile3
Secrets
31 references resolved on worker · 0 values sent to control plane
What crosses the boundary.
Everything sensitive stays where it was read. What leaves is status, not content.
Stays on the worker VM
- Screen content
- Field values
- PII
- Screenshots
- Credential values
- Files handled
Inside your network. Nothing here is transmitted.
outbound onlyTLS 1.2+
Leaves in telemetry
- Step name
- Status
- Timing
- Failure class
- Evidence reference
Content-free. No field values, no PII, no screenshots.
What the model can and cannot do.
The model plans. The agent executes inside a fixed allowlist.
The model can
- Search and run saved workflows with typed inputs
- Check run status and read redacted results
- Author and validate new workflows
- Pick on-screen elements by index from a named list
The model cannot
- See a credential value
- Run shell or arbitrary code
- Choose raw screen coordinates
- Skip a confirmation gate or cross a tenant
Evidence we can hand you today.
SOC 2 Type 2
Audit completed. Report shared under NDA.
ISO 27001
Certified. Certificate shared under NDA.
Penetration tested
Third-party test with remediation, April 2026.
HIPAA ready
Business Associate Agreement available on Business and Enterprise plans.
GDPR ready
DSAR procedure, EU representative, privacy governance.
Walk your security team through it live.
Thirty minutes with the people who built the agent. Bring the questionnaire.