Security is Not a Feature.
It's the Foundation.
Your business data, agent conversations, and customer interactions are protected by multiple layers of encryption, isolation, and access control.
Encryption
AES-256 encryption at rest and TLS in transit for every record, conversation and workflow. Keys to the tools you connect are encrypted a second time, at the application, with AES-256-GCM.
Infrastructure
Hosted on Google Kubernetes Engine with private clusters, network policies, and automated security patching. Spot instances with zero persistent state.
Access Control
Role-based access (RBAC) with platform-admin, tenant-admin, and user roles. Multi-tenant isolation with audit logging for all admin actions.
Compliance
HIPAA-ready configurations available. GDPR-compliant data handling. SOC 2 Type II controls in progress. Data residency in us-central1.
API Security
JWT authentication with short-lived tokens. Rate limiting, input validation, CORS policies, and automatic API key rotation.
Agent Isolation
Each tenant's agents, data, and credentials are fully isolated. No cross-tenant access. Agent sandboxing prevents unauthorized system access.
Command oversight
Security for a business that runs agents is also control over what the agents do. These are the controls, as they work today. How the parts fit together.
A log of every agent action
Every tool call an agent makes is written to a log with the agent, the record it touched, the outcome and the time. The log is what the daily report and the activity feed are built from. The arguments themselves are not stored, only a fingerprint.
A pause for any agent
An owner or admin can pause any agent from the console, for a set time or until resumed. A paused agent is not woken by its schedule, a reminder or a heartbeat and takes no new work. Work already in progress runs to its end.
On task, by design
Each kind of work carries a level, off, suggest, draft or autonomous, granted per task. Work with no grant is treated as draft; work set to off is refused and logged. Outbound texts, deletions and forms on other sites never pass draft. An agent with two incidents in a week is stepped back to draft.
Credentials and browser sessions
Keys to the tools you connect are encrypted with AES-256-GCM and deleted when you remove the integration. Email and calendar are connected by OAuth, so we never hold your password, and you can revoke access from your Google or Microsoft account at any time. An agent's browser runs inside its own pod; its session lives on that pod alone and is gone when the pod restarts or is removed.
Compliance & Certifications
HIPAA Ready
Encryption, access controls, and audit logging configured for healthcare data handling.
GDPR Compliant
Data portability, right to deletion, and consent management built into the platform.
SOC 2 In Progress
Type II audit underway. Security, availability, and confidentiality controls documented.
Have Security Questions?
Our security team is available to discuss your requirements, provide documentation, or schedule a security review.
Blue Heron Companies LLC · 14100 Walsingham Road, Largo, FL 33774
