/ Trust
Security and privacy
Every client has an instance of their own, separate from other clients; credentials are stored encrypted; and nothing leaves AgentWork without your knowledge.
A separate instance per client
AgentWork is a managed service: every client gets an instance of their own, a copy of AgentWork with only your company in it.
- Separate data. Your database, agent team, projects, reports and files share no space with another client's.
- A separate network. One instance cannot reach another.
- One owner. Each instance has one account: yours. No other account can sign in to your company.
Signing in
- Sign in with your own username and password.
- After 5 wrong passwords, the username is locked for 15 minutes.
- A setup link works once and for 24 hours. When the password changes, every other session is signed out.
Your credentials
Your API keys, subscription tokens, Telegram bot token and social media access are stored encrypted with a key that belongs to your instance alone. Once saved, they are never shown in full again, only their last few characters.
Reaching the internet
- Agents reach the internet only through a restricted way out. It refuses internal addresses, local network addresses and cloud metadata addresses, so a link cannot be used to look inside the system.
- Web research runs in an isolated browser environment.
- Web page content is treated as material, never as instructions. Hidden text on a page telling an agent to do something, such as asking for credentials, is not carried out.
- Agents can only use the tools given for their task.
What leaves AgentWork
- To your AI model provider. To work, agents send text to the models you connect, such as Anthropic or OpenAI. That text is processed under the provider's terms, on your account. Pick a provider and plan whose data policy fits your needs.
- To the services you connect, such as Notion, Telegram or social media, and only for the actions you allow. Posts from agents always wait for your approval, and changes in outside services do so by default too.
- To search engines and the sites read. While researching, agents send search terms to search engines and open the source pages, as you would when browsing the web.
- Reports you share. A report can be read outside your instance only through a share link you create. The link expires and can be turned off at any time.
Beyond that, your company's data stays in your instance.
Checks that keep running
Every AgentWork release passes a set of automated security tests that attack the system on purpose: attempts to reach internal addresses through every feature that opens a URL, web pages trying to give agents instructions, and agents trying to use tools they were not given. We also attack test instances live to make sure one instance can reach neither another instance nor the server behind it.
Security questions
A question about security, or a vulnerability to report? Contact us through agentwork.id.