Security & Compliance
Security controls your enterprise team will actually accept
SOC 2 Type II, HIPAA-ready, GDPR-compliant. Full audit trails, RBAC, SSO, and data residency options.
Certifications
Certifications & compliance
Protect agent workflows with enterprise-grade controls, secure data access, and full auditability across every action.
HIPAA Ready
BAA available for healthcare customers. PHI encrypted at rest and in transit. Access controls meet HIPAA safeguard requirements.
Access & Identity Controls
Control who can build, deploy, and review agents
Manage authentication, permissions, and audit visibility across every agent, workflow, and user action.
SSO via SAML 2.0
Integrate with Okta, Azure AD, Google Workspace, or any SAML 2.0 identity provider. Enforce MFA at the identity provider level.
Role-based access control
Define roles with precise permissions: builds agents, deploys them, accesses audit logs. Roles are auditable centrally and managed.
Tamper-evident audit trail
Every agent action, configuration change, and user login is logged with timestamp and identity. Logs are exportable to your SIEM via API.
Data Security
Protect all connected data and sources.
Keep data encrypted, region-controlled, and isolated with secure deployment options built for enterprise environments.
FAQ
Frequently asked questions
Can we get the SOC 2 Type II report?
Yes. The report is available to prospective and current customers under a mutual NDA. Contact your account representative or reach out to security@autonoma.ai to request.
Do you support on-premises deployment?
Yes. Enterprise customers can deploy Autonoma within private cloud or on-premises environments based on security requirements.
How are agent actions logged?
Every agent action is recorded with timestamps, inputs, outputs, tools used, permissions, and outcomes for full auditability.
Can agents access data beyond their configured permissions?
No. Agents can only access approved tools, data sources, and actions defined by their configured permissions.
Do you have a vulnerability disclosure program?
Yes. Security researchers can responsibly report potential vulnerabilities directly to our security team for review and remediation.
