Is my data safe with a Workforce agent?

Automat maintains an established security and compliance program (SOC 2, in-progress ISO 27001, and related controls), on top of the own-accounts, least-privilege access model described in the article on agent logins, your agent's access is scoped, auditable, and independently revocable by design, not just by policy. Security documentation is available on request, reach out in your support channel or to your Automat contact and we'll get you what you need (NDA required for certain reports like a full SOC 2 report or pen test results).

Related: Someone shared something sensitive with the agent by mistake. Can it be deleted? and Is our data used to train other customers' agents or AI models?