Your clients' books stay private.

• Separate workspacesEvery file, report and question belongs to one firm's workspace, and every database lookup is filtered by it. A record from another workspace looks exactly like one that doesn't exist. Tests check this on every change.
• Trusted sign-inSign in with Google or email through Google Cloud Identity Platform. Agentlyze never sees or stores your password, and email accounts must be confirmed.
• We name the filesUploaded files are stored under names Agentlyze generates, never names or paths taken from the upload.
• Files are data, not instructionsNothing written inside an uploaded file can change what Agentlyze does or what it can access.
• Code does the mathThe AI writes the words. Every number is calculated by code, checked, and linked to the exact file, sheet and row it came from.
• Encrypted filesEvery uploaded file is encrypted on our disks with AES-256, so a copied disk or backup shows nothing. Connections use HTTPS.
• Sessions that endYou're signed out after 12 hours without use and after 7 days in any case. One click signs you out on every device.
• Roles for your teamOwners manage the team and settings. Reviewers run and approve reports. Viewers can only read. Removing someone ends their access at once.
• Your data, your callAn owner can download everything in the workspace, original files included, or delete the whole workspace for good.
• Limits on misuseSign-in, uploads and the AI are rate limited, and uploads are checked to be the file type they claim to be.
• Nothing leaves without youAgentlyze drafts. It never emails, posts or writes to another system on its own.
• Private logsNo passwords, keys or file contents are written to our logs. Sign-ins, uploads and report runs are recorded in an audit log.

Compliance

Agentlyze doesn't have a SOC 2 report yet, and we won't claim one until we do. If your firm needs a security questionnaire answered, book a demo and we'll go through it with you.