Security & trust

Governed at the layerthe data lives in.

Security on Agimus is not a bolt-on. Isolation, access control, and audit are properties of the data layer itself — and the same rules bind every person, application, and model that touches it.

Tenant isolationEach tenant runs in its own isolated store; every query is scoped to it before it executes. Nothing is shared across tenants.All data
Column-level accessGroup allow-lists on entities and on individual properties. Outside the group, the column does not exist.People · apps · AI
AI under the same rulesModels resolve the identical access context a person would — the same code path, not a parallel one.Every AI read
Full audit trailEvery action logged with actor, resource, and request id — including system jobs. Reviewable in the app.Platform-wide
MFATOTP two-factor on accounts; sessions are short-lived, server-validated tokens.All users
Hashed API keysKeys shown once, stored only as SHA-256 hashes, scoped per tenant, revocable at any time.Programmatic access
01

Isolation

Every tenant runs in its own isolated data store — never a shared pool with a tenant label. Every request resolves an access context first: who you are, which tenant, which groups. No context, no query.

02

Access control

Access is granted by group, down to the individual column. A restricted property doesn't blur or warn — it simply isn't there for anyone outside its groups.

AI goes through the same gate. A model resolves the same access context as a person — there is no separate, softer path.

OrderEntityAccess
Properties
order_idAll groups
totalAll groups
marginFinance only
unit_costFinance only
Same rules resolved for
People · Applications · AI via MCP
03

Audit

Every action on the platform is written to the audit log — who did it, to what, and under which request. System jobs are logged the same way people are. Admins review the trail in the app, not in a support ticket.

ActorActionWhen
M. Rossidataset.sync_completed · sap_orders2 min ago
Assistantontology.query · Order — 214 rows9 min ago
Systemapp.deployed · replenishment @ v2142 h ago
A. Bianchigroup.member_added · Financeyesterday
Excerpt · audit log
04

Accounts & keys

MFA on every account.

TOTP-based two-factor enrollment, enforceable tenant-wide. Sessions are short-lived tokens, refreshed server-side.

Keys you can't leak twice.

API keys are shown once and stored only as hashes. Scoped to a tenant, revocable at any time, every use attributable.

Secrets stay on the platform.

Application credentials are managed by the platform, injected at deploy time — never in your repository.

Encrypted, everywhere.

Runs on Google Cloud. Data encrypted in transit and at rest; tenant workloads deploy through reviewed, versioned builds.

Built to pass your security review.

Talk to us
We respond within 24 hours