Enterprise-Grade Security, Built In

Multi-tenant isolation, immutable audit logs, and defense-in-depth — not bolted on, but foundational to the architecture.

Multi-Tenant Isolation

Choose the isolation level that matches your security requirements.

Shared

Starter

Single namespace, shared database with tenant_id column isolation. Logical separation at the data layer.

Pool

Standard

Single namespace, separate database per tenant. Shared compute with dedicated data storage.

Silo

Enterprise

Separate Kubernetes namespace per tenant. Dedicated database, compute, and network isolation.

Six-Layer Architecture

Hexagonal architecture with strict adjacent-layer communication. Each layer has a single responsibility.

L6

Workforce Dashboard

Next.js dashboard + Slack integration

L5

Orchestration

CrewAI + Temporal durable workflows

L4

Agent Runtime

Persona engine, reasoning, memory, tools

L3

Skill System

Versioned skills with eval pipeline

L2

Tool Layer

12+ MCP servers with RBAC

L1

Infrastructure

Kubernetes, data stores, observability

Data Security & Compliance

Every state change is immutable, timestamped, and correlated. Your data is always under your control.

SOC 2 Type II Ready

Architecture designed for SOC 2 compliance. Immutable audit logs, access controls, and encryption at rest and in transit.

ISO 27001 Ready

Information security management controls built into the platform from day one.

Immutable Audit Log

Every state change is recorded as an immutable, timestamped CloudEvent in the event store. The event store IS the audit log.

Transactional Outbox

State changes and events are written atomically in a single MongoDB transaction. No lost events, no inconsistencies.

Full Observability

Prometheus metrics, Grafana dashboards, Loki logs, OpenTelemetry traces, and Jaeger distributed tracing.

MCP RBAC

Agents never touch external systems directly. All access goes through MCP servers with per-agent, per-tool role-based access control.

Secure by Default

Start building with enterprise-grade security from day one.