Security & compliance
Built for teams that need control, not just speed
AgentFarms is for teams that refuse to trade governance for momentum. Boundaries, approvals, scoped access, and evidence are built into the product because useful automation without control is just a new failure mode.
Certifications & readiness
SOC 2 Type II
Audited annually across security, availability, and confidentiality controls.
GDPR
Privacy controls and data handling processes aligned to EU data protection requirements.
HIPAA Ready
Healthcare-focused controls, audit logging, and encryption posture available for regulated environments.
ISO 27001
Information security management practices aligned to ISO/IEC 27001 standards.
Security architecture
Every layer is built around scoped execution and clean review paths.
Encryption everywhere
- TLS 1.3 for data in transit
- AES-256 encryption at rest
- Encrypted credential storage with managed key protection
- Routine secret rotation practices
Isolated runtimes
- Per-worker or per-task runtime isolation
- Network boundaries between execution environments
- Short-lived scoped credentials for task work
- Automatic teardown after completion
Full auditability
- Action records tied to identity, time, and reason
- Exportable evidence for reviews and investigations
- Tamper-evident operational history
- Retention policies aligned to plan and policy
Identity & access
- SSO support for team identity providers
- Role-based access control for operators and reviewers
- MFA and access restriction controls
- Configurable workspace-level permissions
Action controls
- Approval gates by risk level or workflow
- Emergency stop for active workers
- Scope limits enforced during execution
- Policy-aware rollout controls
Reliability posture
- Production monitoring and alerting
- Backup and recovery procedures
- Operational incident response paths
- Multi-environment deployment support
Compliance checklist
A practical review pack for security teams
Use this checklist to evaluate agent deployments with the same discipline you apply to infrastructure, identity, and vendor access reviews.
Security FAQ
Does AgentFarms store our source code?
Workers use the access you grant at task time. Teams can keep scope narrow and require review before anything sensitive moves forward.
Can we revoke access quickly?
Yes. Administrators can halt worker activity, revoke credentials, and tighten access boundaries when a workflow or environment changes.
How are credentials managed?
AgentFarms is designed around scoped access, short-lived task credentials where possible, and centrally managed connector permissions.
Can security teams review how a worker acted?
Yes. The platform keeps evidence tied to tasks, approvals, and actions so teams can inspect what happened and why.
Need a deeper security review?
If your security team wants to go deeper, we are happy to get specific about architecture, controls, and rollout policy before anything ships.