Permissions per AI employee
Each AI employee only works inside the scope you set. Actions outside that scope are blocked, not just by policy.
Security
How we protect your data and operations.
AIAGENTNET is built on a principle of least privilege. Every AI employee operates inside a declared boundary, every action leaves a receipt, and business data stays in the customer-controlled environment.
Security on the stack
Boundaries, identity, receipts
Permissions, named AI employees, and reviewable records wrap every action from people and AI to your data.
Boundary · identity · receipt chain
AI
AI employee
Day-to-day execution
running
runningblockedwaiting humanreceipted
Identity plane
Named AI staff
Your data
Records you control
Runtime host
Where AI employees act
- IdentityNamed AI
- ToolsConnectors
- PackagesInstall
- Agent WebOpen edge
Security controls
L3
Human
Judgment, approval, relationships—irreplaceable
L2
AgentOS X
Company OS & workspace you can self-host
L1
AI employees
Day-to-day work with identity and receipts
L0
Your data
Records under your control
Inspect a control
Step 01 of 04
Set permissions
Each AI employee acts only inside the scope you set on the OS.
Step 02 of 04
Named AI employees
Each action is tied to a named AI employee—not an anonymous bot.
Step 03 of 04
Receipt trail
Actions leave reviewable receipts on workspace and data.
Step 04 of 04
Data in your bounds
Business data stays in environments you control.
Replace, for the irreplaceable.
Security practices
What we do today
Named AI employees on every action
You can see which AI employee acted. AI employees do not hold long-lived bearer tokens; each call is signed on the host and single-use. Product API keys stay separate from AI identity.
Execution records and audit trail
Every AI action leaves a reviewable record: which AI employee, which tools, inputs, outputs and outcome. Records are retained for audit and are not mutable after creation.
Data stays in your environment
Customer records, conversation content and workflow outputs live in the customer-controlled environment. AIAGENTNET keeps account, billing, entitlement and delivery records for authentication, support, invoicing and compliance.
Self-hosted responsibility
For self-hosted AgentOS X, customers are responsible for local host security, backups, network exposure, operating-system patching and user access. AIAGENTNET support follows the order, DPA and support request scope.
TLS in transit
All API traffic between clients and AIAGENTNET services is encrypted over TLS 1.2 or later. Internal service-to-service calls on the same host do not leave the process boundary.
Access control on billing and entitlement
Subscription, entitlement and delivery records are scoped to the authenticated customer account. Cross-account access is prevented at the data layer.
AIAGENTNET MAIL sending compliance
Account verification, billing, support and delivery notifications use AIAGENTNET MAIL. Abuse, spam or unauthorized sending reports should be sent to security@aiagentnet.cloud and support@aiagentnet.cloud.
Acceptable Use enforcement
Agent actions that impersonate humans, bypass permissions, escalate privileges, attack third-party systems or evade audit may be suspended under the Acceptable Use terms.
Subprocessors and service providers
Subprocessors and service providers
Providers that may process limited account, billing, delivery or operational data for AIAGENTNET LLC services. Self-hosted AgentOS X business data stays in the customer environment.
| Category | Provider / role |
|---|---|
| Payments | Stripe, Inc. — card and bank payment processing for international checkout |
| CDN / edge security | Cloudflare, Inc. — DNS, TLS termination and edge protection for public web traffic |
| Hosting | Cloud infrastructure providers operating the production nodes that serve www.aiagentnet.cloud and related APIs |
| AIAGENTNET MAIL (first-party) for transactional mail on AIAGENTNET domains | |
| Analytics (limited) | Cloudflare Web Analytics / insights where enabled — no ad cookies by default |
Compliance roadmap
Compliance roadmap
Selected programs we are investing in as the product and customer base grow.
| Standard | Status |
|---|---|
| SOC 2 Type II | In progress |
| ISO 27001 | Planned |
| GDPR data processing agreement | Available on request via privacy@aiagentnet.cloud |
| Penetration testing | Planned |
Vulnerability disclosure
Vulnerability disclosure
If you discover a security vulnerability in AIAGENTNET products or infrastructure, report it to security@aiagentnet.cloud. We acknowledge reports within 2 business days and aim to resolve confirmed issues within 30 days.
Vulnerability reports, security incidents, abuse reports