SECURITY & GOVERNANCE

Enterprise autonomy needs accountable controls.

Digital employees should operate within explicit permissions, execution boundaries and human review. UAgents includes related application-level components; deployment controls must be independently validated.

Read documentation
Important context: No SOC 2, ISO 27001, penetration-test certification or end-to-end sandbox assurance is claimed here.
01

Role-based access

Organization and permission components exist in the platform. Confirm tenant isolation in your environment.

02

Human oversight

Use documented review and approval paths for sensitive actions and reusable skills.

03

Execution boundaries

Executable skills depend on a separate runtime service. Isolation and secrets policies require deployment review.

04

Auditability

Review application traces and records together with infrastructure and provider logs.

05

Model and data boundaries

Choose model providers, storage and integrations with explicit knowledge of where data flows.

06

Data retention

The marketing site's demo form may use email and optional backup storage. Automatic deletion is not yet implemented.

Before a production rollout

01

Threat-model the workflow

Inspect privileges, prompt-injection exposure and sensitive-data access.

02

Validate runtime controls

Test network access, tenant boundaries, human approvals and operational recovery.

03

Document ownership

Agree incident contacts, retention rules and deployment-specific responsibilities.

Review security requirements together.

We can discuss architecture, data location and governance needs before a pilot.