Security
Isolated by design. Accountable by default.
Autonomous agents need stronger boundaries than chat assistants. ExoHuman isolates every customer and every agent, keeps secrets out of prompts and records every action against a named owner.
acme/chief-of-staff · memory● committed 4m ago
- a3f19cmemory: 14 leads scored, 2 objections learned
- b7e02dmemory: weekly brief template refined
- c91a44skill: follow-up cadence v3
- d15f08memory: pricing objection playbook
Audit log · append-only · hash chain onchain verified
| #4824 | 09:13:40 | marketing | git.commit | auto |
| #4825 | 09:14:11 | back-office | crm.update | auto |
| #4826 | 09:14:56 | research | report.publish | approved · eugene |
| #4827 | 09:15:20 | brain | graph.merge | auto |
A dedicated instance per customer
- Your own database, cache, API and Workspace. No shared tables, no multi-tenant runtime.
- Your instance lives in the region you choose and does not move without your consent.
- Private networking between your control plane and worker nodes; worker nodes accept no inbound connections.
Agents in hardened containers
- Each agent runs in its own container with dropped capabilities, no privilege escalation and hard resource limits.
- An agent only sees the files, tools and credentials it was explicitly granted.
- Agent-to-agent delegation is governed by explicit permissions and recorded.
Credentials that never leak into prompts
- Secrets are encrypted at rest and injected into the agent's container at run time.
- Scoped per agent, rotated from one place, revoked instantly.
- Model provider keys can stay yours: bring your own and the traffic is billed to you directly.
People decide what matters
- Configurable approval gates for payments, outbound messages, publishing and destructive operations.
- Role-based access, OIDC single sign-on and two-factor policies on Scale and above.
- A complete, exportable audit log: every run, tool call, approval and configuration change.
Operations
How we run the platform.
- Encryption
- TLS 1.2+ in transit; encrypted volumes and backups at rest.
- Backups
- Nightly, off-site, with tested restores. Retention by plan.
- Access by our staff
- Only on-call operators, through an audited admin channel, for operations and support.
- Vulnerability management
- Patched base images, dependency scanning and out-of-band security releases.
- Data ownership
- Your data is yours. Export everything at any time; deleted 30 days after cancellation.
- Model providers
- Choose which providers your agents may use. We do not train models on your data.
Security review or DPA?
Questionnaires, data processing agreements and responsible disclosure: [email protected].