Security reviews
Here to helpSend us your security questionnaire and we will answer it in full, with a walkthrough of how Agento handles, stores and protects your data.
Trust Center
The straight answers your security and procurement teams need: how your data is handled, where we stand on compliance, the third parties involved, and how to report a security concern. No spin.
How your data is handled
What happens when Agento does a piece of work for you. Every step stays within your guardrails, is captured for your records, and can be traced back through a complete audit trail.
1. Your systems stay the source of truth
Agento works with the tools you already use, like Procore, SharePoint, and Salesforce. Your data stays in your systems. We only handle what a given task actually needs, nothing more.
2. Secure, controlled access to your tools
Agento securely connects to all your tools through a single, monitored access point. Sign-in credentials are stored in a protected vault, kept separate from the AI, and scoped to each individual project.
3. Work runs inside guardrails you set
Every task runs within the permissions, approval rules, and boundaries you define. Nothing steps outside the limits you've put in place.
4. Reliable automation that never loses work
Long-running work is saved as it goes. If something interrupts a task, it resumes on its own from where it left off, rather than starting over or losing progress.
5. A complete, tamper-evident audit trail
Every action is recorded as a clear, verifiable record you can review at any time, and delivered into the monitoring and reporting tools your team already relies on.
How we protect your data
The plain version of how Agento keeps your data safe, and how we work with your security team.
Data protection
Built inData is encrypted in transit and at rest, each customer's data is kept separate, and credentials are stored in a secure vault away from the AI.
Audit trail
Every actionEvery AI action is recorded as tamper-evident evidence you can review and export for your own audits.
Sensitive and regulated data
Scoped with youWorking with health, financial or government data? Talk to us first and we will agree the right setup with you before you start.
Privacy and data protection
Privacy PolicyWe handle personal information as set out in our Privacy Policy. Privacy contact: privacy@agento.com.au.
International data transfers
Talk to usIf your data must stay in a particular country, contact us before you start so we can tell you exactly where it is processed.
Subprocessors
The third parties that touch customer data. We update this list when it changes.
Provider
Purpose
Cloud infrastructure provider (Australian region)
Hosting, storage, and core infrastructure, kept in Australia
Workflow automation service
Runs long-running automations reliably so no work is lost
AI model providers
Power the AI behind each task; Agento automatically uses the best AI for each job, and you can restrict which providers are used
Payment processor
Billing and payment processing
Product analytics service
Usage insights from signed-in workspaces to improve the product
Content delivery & security network
Fast, secure delivery and protection against attacks
Vulnerability disclosure
Report security issues to security@agento.com.au. We acknowledge within 2 business days, provide an initial assessment within 5 business days, and remediate confirmed issues on a timeline proportionate to severity.
We do not currently operate a paid bug bounty program. Good-faith research is welcome on the standard disclosure norms.
Data processing terms
If your organisation needs a Data Processing Addendum, talk to us and we will work through it with you.
Email legal@agento.com.au with your entity name and what you need.
Trust pack for procurement
For procurement or security review, we will answer your security questionnaire, share our current sub-processor list and walk your team through how the platform works. Email security@agento.com.au.