Encased — AI agent security

Security & trust

Our security and compliance roadmap

We would rather tell you exactly where we stand than overclaim. Encased is an early-stage product. Below is what is in place today and what we are building before we recommend Encased for regulated or mission-critical workloads.

What is in place today

  • All traffic is encrypted in transit (HTTPS/TLS). Data is encrypted at rest by our cloud provider.
  • Agent keys are stored only as one-way hashes; the full key is shown once and can be revoked instantly.
  • Every workspace's data is separated by database-level access rules.
  • Containment actions and policy changes are written to an audit log that cannot be edited or deleted.
  • Personal data found in agent actions is masked before a reviewer sees it.
  • The gateway fails safe: if Encased can't be reached, our SDKs block the action by default.

Certifications & compliance we are building toward

SOC 2 Type IIPlannedIndependent audit of security, availability and confidentiality controls over a 3–12 month observation window. The most-requested report from US buyers.
ISO/IEC 27001PlannedCertified information security management system. Expected by EU, UK and Australian enterprise buyers.
ISO/IEC 42001PlannedThe international standard for managing AI systems responsibly — a natural fit for an AI agent safety product.
Independent penetration testPlannedAnnual third-party test of the website, API gateway and SDKs, with a summary letter available to customers.
Australian Privacy Act / APPsIn place (basic)Personal information is collected only to operate the service and answer inquiries. A full privacy policy and data breach response plan are being finalised.
GDPR & CCPA readinessPlannedData processing agreement, sub-processor list and data-subject request process for EU and Californian customers.
Data residency optionsPlannedChoice of US, EU or Australian data storage for Enterprise customers.
Isolated / self-hosted deploymentPreview availableThe Encased gateway can run inside your own servers via a Docker container, so agent actions never leave your network. Download: encased.ai/sdk/encased-gateway-0.1.0.tar.gz (Enterprise preview, not yet independently reviewed).

Details: SOC 2 readiness · ISO 27001 readiness · Official compliance statement

Encased does not currently hold SOC 2, ISO 27001, ISO 42001 or any other formal certification.

Uptime & support

  • Today: hosted on a global edge network. We aim for high availability but offer no formal uptime guarantee (SLA).
  • Planned: a 99.9% monthly uptime target with a public status page and service credits for Enterprise plans.
  • Planned: 24/7 incident response for Enterprise with a defined response time.

Report a vulnerability

Found a security issue? Email get@encased.ai with “Security” in the subject. Please give us reasonable time to fix it before sharing details publicly.