Snapshot 219507
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security by Design Security Is OurTop Priority Your code, data, and intellectual property are protected by multiple layers of enterprise-grade security measures and compliance certifications. AES-256 Encryption at Rest TLS 1.3 Encryption in Transit Event-Driven Autonomous Response Zero Reported Incidents to Date Multi-Layered Security Architecture Defense in depth with multiple security layers protecting your assets End-to-End Encryption All data is encrypted in transit using TLS 1.3 and at rest using AES-256. TLS 1.3 for all API communications AES-256-GCM for data at rest Perfect forward secrecy Certificate pinning for mobile SDKs Access Control Multi-layered authentication and authorization with zero-trust architecture. Multi-factor authentication (MFA) Single Sign-On (SSO) support Role-based access control (RBAC) API key rotation and management Event-Driven Monitoring Event-driven incident response with on-demand autonomous agent engagement. Event-triggered threat detection Autonomous incident response agents Security event logging Anomaly detection on telemetry Infrastructure Security Secure, isolated infrastructure with multiple layers of protection. Isolated customer environments Network segmentation via VPC AWS Shield DDoS protection Infrastructure-as-code with reviewable changes Code Security Your code is protected with the highest security standards. Secure code repositories Encrypted code analysis No persistent code storage Intellectual property protection Incident Response Autonomous incident response agents with documented runbooks and escalation paths. Autonomous triage on event trigger Escalation to founder on-call Automated containment where scoped Post-incident analysis and review Compliance & Certifications Meeting and exceeding industry standards for security and privacy SOC 2 Type I Autonoma is preparing for SOC 2 Type I. Audit engagement in progress; report available on request once issued. In Progress SOC 2 Type II Targeted after Type I issuance. Not yet audited — do not rely on for procurement until we publish the report. Planned GDPR DPA available on request. We follow GDPR principles for EU personal data handling; formal assessment in progress. DPA on Request HIPAA Not currently offered. HIPAA-eligible services and BAA support are on the roadmap for enterprise tiers. Not Offered ISO 27001 International standard for information security management. In Process AWS FTR Foundational Technical Review submission in progress for AWS Marketplace listing. In Progress Our Security Practices Comprehensive security measures at every level Responsible disclosure via security@theautonoma.io Secure software development lifecycle (SSDLC) with CI gating Data minimization and privacy by design Disaster recovery and backup planning Supply chain dependency scanning in CI Customer data isolation at application and database layers Principle of least privilege for agent tool access All autonomous actions logged and auditable Your Data, Your Control We believe in complete transparency and control over your data Data Ownership You retain full ownership of all your code, data, and intellectual property. We never claim any rights to your content. Data Portability Export your data anytime in standard formats. No vendor lock-in. Complete data deletion upon request. Data Isolation Each customer's data is completely isolated. Your code never trains models used by others. Have Security Questions? Our security team is here to help Contact Security TeamSecurity Documentation For vulnerability reports, please email security@theautonoma.io