Security and trust

How Aegis approaches security.

The principles that apply across Aegis products, and where to find product-level detail. This page says plainly what it does and does not cover.

How we think about building software people have to trust.

These are design principles that guide Aegis products. Product-level implementation detail is kept separate, below.

  • Secure by design

    Security is considered when a feature is designed, not added afterward.

  • Governed automation

    Automation runs inside defined limits, and those limits can be reviewed.

  • Human approval

    Consequential actions are designed to wait for a person to decide.

  • Auditability

    Products record what happened, so teams can review it and explain it later.

  • Identity and least privilege

    Access should be scoped to what a role needs, and sign-in should use the identity systems customers already run.

  • Data handling

    Workflows should use only the data they need, and that data should be protected as it moves and where it is stored.

  • Responsible AI

    AI assists people and is not given unchecked authority. Input from untrusted sources is treated as untrusted, and sensitive data is controlled.

What each product does today.

Specifics belong to the product that implements them. Here is how each product describes its own controls.

Aegis GRC

  • Tenant isolation: each workspace is logically isolated, with scoped access
  • Encryption in transit and at rest
  • Tamper-evident audit logging
About Aegis GRC

Aegis Sentinel

  • Human approval for consequential actions, with group-based approvals
  • Bounded autonomy and a kill switch
  • Entra single sign-on
  • Tamper-evident audit logging
  • Prompt-injection defenses and sensitive-data egress controls
About Aegis Sentinel

What this page does not list.

This page does not list certifications, attestations, or audit reports. If your team needs current security documentation for a review, ask us and we will tell you exactly what is available.

Ask a security question

Questions from your security team?

We are glad to answer them directly.

Contact usExplore the products