Snapshot 150837
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Enterprise Trust Enterprise Trust is our comprehensive security, governance, and compliance foundation built into every layer of Workato. Every workflow and AI agent action is authenticated, authorized, and auditable by design. Zero-Trust by default Workato's network architecture is designed with multi-layered security and identity-driven access for all workflows and AI agent actions. Observable & governed Every workflow and AI agent interaction is governed by verified user access giving full visibility and control over the actions taken. Compliance that scales Built to meet the world’s most rigorous standards, our cloud-native infrastructure keeps you compliant as standards evolve, so you can focus on building. Built for enterprise trust Where agentic orchestration meets absolute control Automation HQ (AHQ) federation Enterprise-scale governance from one control plane. AHQ lets you decide exactly which capabilities and connectors each workspace can use, and set usage limits per team. Built-in review and approval workflows enforce your standards on every deployment. Role-based access control Granular, custom roles define who can create, build, and deploy workflows, agents, MCP servers, and more. Agent Studio RBAC controls access to test mode and conversation history. Data encryption & key management Data is protected with TLS 1.2+ in transit and AES-256 at rest. Encryption keys are provisioned on a per-customer basis and rotated every hour, with optional Enterprise Key Management (BYOK) available for customers who want full control over their own keys. Secrets & credentials management Eliminate plaintext credentials with native integrations for AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault, enforceable across the entire workspace or specific projects. Network security & data Isolation Workato supports AWS PrivateLink and Azure Private Link for private connectivity that keeps traffic off the public internet. The On-Prem Agent connects to systems inside your private network. Regional data centers in the U.S., E.U., Japan, Singapore, China, Israel, Australia, and Korea keep data in-region. Auditability Audit logging with configurable 90-day retention captures workflow executions, configuration changes, and user actions. Extended retention available via external SIEM. MCP guardrails MCP server management with SAML 2.0 SSO, OAuth2, token-based authentication, rate limits, and usage quotas. Verified user access ensures users only access permitted applications. Human-in-the-loop Route critical AI decisions for approval in Microsoft Teams or Slack. Human decision points ensure policy compliance for discounts, exceptions, and high-stakes actions. Compliance & governance SOC 1/2/3, ISO 27001/27701, ISO 42001, HIPAA, PCI-DSS 4.0.1, IRAP, and NIST 800-171A r2 certified. Security Security is built-in, not bolted-on Enterprise-grade security is embedded into the platform through a multi-layered strategy that spans infrastructure to end-user execution. This includes verified user access, masking of PII and sensitive fields, encryption at rest and in transit, and per-customer hourly rotation of encryption keys. Governance Governed actions across every system Workato provides complete visibility and control over AI agents, MCP servers, and workflows, with human-in-the-loop approvals and granular RBAC, including environment and project-level permissions. Compliance Certified to the highest global standards Backed by standards and compliance certifications, continuous security validation through regular penetration testing, and an active bug bounty program. Dive deeper into security & infrastructure Want the full technical details? Trust Center Our Trust Center provides access to comprehensive security documentation, compliance reports, and architectural specifications for security and infrastructure teams. Request access to security reports Infrastructure & deployment Explore deployment architecture and hosting options. Learn about Virtual Private Workato, multi-region architecture, disaster recovery capabilities, and flexible deployment models. View infrastructure Details 256-bit AES-256 at rest, TLS 1.2 in transit. Secrets vaulted with envelope encryption. See customer story 90 day Up to 90-day configurable audit logs. Extended retention via external streaming. See customer story 25,000+ More than 25,000 global customers trust Workato to run mission-critical workflows. See customer story Put AI to work