Built for operators who take data seriously.
Workspace-scoped storage. Residency controls per workspace. An audit log on every agent action. A GDPR rights surface that actually returns your data. By default — not as add-ons.
What we guarantee about your data.
Architectural, not aspirational. Enforced at the database layer.
Workspace-scoped storage
Every customer's data lives in workspace-scoped Postgres tables with row-level-security policies. The runtime cannot read across workspaces even by accident — the database refuses queries that try.
Isolation checked on every change
Agents and users in one workspace have zero access to another's data — enforced at the database layer (row-level security plus membership-checked functions), not just assumed. An automated check runs before any code change ships and fails the build if a new database function is missing that guard.
Residency you pick
Global, EU, US, or CH per workspace. Residency is enforced at the database trigger level — every new row inherits its workspace's residency tag. Switch later; existing rows stay where they were written.
No cross-workspace training
We don't train models on your workspace content. Off-the-shelf providers (Anthropic, OpenAI, Google, Mistral) plus our own runtime — none of it learns from your data.
Where your data lives — you choose.
Residency is per workspace and enforced at the database layer. Pick a region to see what staying there means.
Residency
Global
Default. Rows may live in any region we operate — best latency, no residency constraint. Switch to a pinned region per workspace whenever you need to.
Illustrative — residency is configured per workspace in settings and enforced by database triggers, not by this map.
GDPR & the audit trail
Built for EU customers and EU-resident employees. Useful outside the EU too.
- Right to access
- One-click export from the GDPR rights surface inside your workspace settings.
- Right to erasure
- Delete-account flow plus a 30-day workspace hard-delete. After that the workspace is gone from our infrastructure.
- Data Processing Agreement
- Downloadable template, signable by contract. Read the DPA template
- Audit log
- Every agent action, every operator override, every cost line — written to the workspace audit log. Retention scales with plan: 30 days, 1 year, or forever.
What we do day-to-day
The routine controls that keep your data safe when nobody is watching.
Encrypted at rest
Postgres + storage buckets on Supabase.
TLS 1.3 in transit
Every edge function and webhook endpoint.
Vault-managed secrets
Workspace credentials encrypted with KEK rotation. Personal-plan tokens isolated from shared workspace tokens.
OAuth-only third-party access
Gmail, Slack, LinkedIn, and the rest connect through OAuth. We store encrypted refresh tokens — never your passwords.
Webhook signature verification
Every inbound provider webhook validates the signature before writing.
Rate-limit + abuse prevention
Workspace creation capped per user (5/24h) and per IP (10/24h). Suspicious patterns escalate to a hold.
Security questions, or a finding to report?
Email security@agentsmith.ch. Responsible-disclosure findings get a same-week reply and a coordinated timeline; no gag clauses.