Security
Your data, kept apart and accounted for.
Every row is scoped to your organization, every answer to the person asking, and every action an agent takes is recorded. Here is how.
Your organization’s data stays yours
Every row of workspace data carries your organization’s ID, and row-level security in the database enforces it on every query. A query cannot reach another organization’s rows by mistake, because the database refuses it.
On Isolated Cloud, your data also sits in a database of its own, on hostnames of your own. It runs the same code and the same migrations as Cloud.
Answers only from what you may read
Knowledge is private by default. A space is visible to its members, and a page can be restricted to named people. AgOS scopes every read to the person asking, so an answer never draws on a page the asker could not open.
Approvals are private too: people see the requests they made, and only someone allowed to decide is offered Approve.
A person approves what leaves
Emails, bookings and outside tool calls that agents prepare can wait in Approvals for a person. Access changes AgOS makes, such as giving a new hire a space, are staged the same way.
Everything is recorded
Every meaningful change and action is recorded with who did it and when. Offboarding marks a person as departed instead of deleting them, so an access review can still see what they had.
Credentials and sign-in
- Stored connection credentials and keys are encrypted with AES-256-GCM.
- Passwords are stored as scrypt hashes, and sign-in locks for 15 minutes after 10 failed attempts.
- Password reset, email verification and invitation links are stored only as hashes. Verification links expire after a day and invitations after a week.
- You can sign in with Google or GitHub instead of a password.
Files and logs
- Uploaded files are kept in private storage and open through signed links that expire.
- Application logs mask email addresses and some phone and ID number formats, and hide fields that hold secrets.
Models and your own keys
To answer and draft, parts of your data go to the AI model provider AgOS runs on: Anthropic, OpenAI or a model you host with Ollama. On Isolated Cloud, AgOS uses your own model keys, so that relationship is yours.
What AgOS collects, who receives it and how it is used, including for training and improving AgOS, is set out in the privacy policy and on the data we collect. Questions go to support@agos.digital.
Ask your company a question.
Create an account, add three to five documents, and ask.