How the security controls are themselves protected
Data handling, permissions and audit for Autessa Security & Compliance
The controls that protect your Autessa company are protected the same way: they live inside your company boundary, they are encrypted with your company’s own keys, the most sensitive changes require a person in the browser, and every change leaves a record.
Data handling
What is stored, and how?
| Data | How it is handled |
|---|---|
| Secret values | Encrypted, never returned by any read. Filled in only inside outgoing HTTPS requests to allowed hosts. |
| Authenticator setup keys | Shown once at setup; the QR code is drawn in your browser. |
| Model provider keys | Encrypted with your company key, write-only, last four characters shown. |
| Connector credentials, history, payloads | AES-256 with keys unique to your company, inside encrypted storage. |
| Masked columns | Stored encrypted; every reveal logged as DECRYPT. |
| Card and account numbers in chat | Held for the conversation only, never saved; the AI sees placeholders. |
| Evidence seals | Write-once storage; COMPLIANCE seals locked until their retention date. |
Permissions
Nobody can grant more than they have
- Inviters cannot grant permissions they lack
- Share levels never exceed your own
- Keys never reach beyond their owner
- Only Admins can assign the Admin role
Audit
Every security change leaves a record
Reports, policies and questionnaires
Autessa’s compliance reports, security policies and subprocessors are on the Trust Center. Platform availability is on the status page.
FAQ
Security questions
Where are Autessa’s audit reports and policies?
On the Autessa Trust Center at trust.autessa.com, where you can request reports and answers to security questionnaires.
Can Autessa staff see our secrets?
No for Sealed secrets: nobody can view them, including support. Revealable secrets need a request approved by a manager in your company, and machine identities can never reveal.
Can a single compromised script mint new credentials?
No. API keys, OAuth clients and SSO are administered only in the web app, behind a person’s session.
Review Autessa with your security team
Walk through the controls, the audit trail and the Trust Center with us.
Reports, policies and questionnaires live on the Autessa Trust Center.
100% customizable, code and all
Make Autessa Security & Compliance fully your own.
Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.
Start free and make it yours