Skip to content

Security & Compliance

Can you trust us with your data?

Agent ID is designed for regulated environments where legal accountability, technical rigor, and operational transparency are mandatory.

Data Privacy Framework

GDPR role clarity by design.

Data Processor

Within our SDK and API services, we operate as a processor. We secure data flows, apply PII scrubbing, and maintain encrypted logging under customer instruction.

Data Controller

We act as controller only for customer account administration, dashboard analytics, and billing operations required to deliver the service.

Data Residency

Regional deployment options include EU-only hosting for teams requiring strict GDPR-aligned data locality and governance controls.

Technical Security

Infrastructure hardened for enterprise AI traffic.

Encryption by default

AES-256 at rest and TLS 1.3 in transit across APIs, logs, and operational telemetry.

Zero-knowledge architecture options

Deploy mode where Agent ID processes metadata while prompt content remains encrypted with customer-managed keys.

WORM audit trail

Immutable write-once logs preserve forensic-grade records that cannot be retroactively edited or deleted.

Compliance Standards

Mapped to the controls your auditors ask for.

  • EU AI Act readiness with Annex IV evidence generation and Article 12 logging support.
  • Infrastructure aligned to SOC 2 Type II controls for security, availability, and traceability.
  • Data center and operational controls aligned with ISO 27001 requirements.