Security
How we protect your data and ensure platform security
Security is at the core of everything we build at AgentPro. We employ industry-leading security practices to protect your data and ensure the integrity of our platform.
Security Features
End-to-End Encryption
All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
API Key Authentication
Secure API authentication with rotatable keys and granular permission controls.
Security controls
Encryption in transit and at rest for credentials, least-privilege access, audit logging and backups. A formal SOC 2 audit is on our roadmap; ask us for the current controls document.
Data Privacy
GDPR-aligned data handling: a Data Processing Addendum, sub-processor list and data deletion on request. See the privacy policy and DPA.
Infrastructure Security
Cloud Infrastructure
Hosted on enterprise-grade cloud infrastructure with automatic scaling, redundancy, and 99.9% uptime SLA.
Network Security
DDoS protection, Web Application Firewall (WAF), and continuous monitoring for threats and anomalies.
Access Control
Role-based access control (RBAC) with audit logging for all administrative actions.
Data Backup
Automated daily backups with point-in-time recovery and geographically distributed storage.
Security Best Practices
Follow these best practices to maximize security when using AgentPro:
Rotate API Keys Regularly
Generate new API keys periodically and revoke unused ones.
Use Environment Variables
Never hardcode API keys in your source code. Use environment variables instead.
Implement Webhook Signature Verification
Always verify webhook signatures to ensure requests are from AgentPro.
Limit API Key Permissions
Use the principle of least privilege when creating API keys.
Monitor API Usage
Regularly review API logs for suspicious activity or unauthorized access attempts.
Keep Integrations Updated
Stay current with the latest SDK versions and security patches.
Report a Security Issue
We take security issues seriously. If you discover a security vulnerability, please report it responsibly by contacting our security team.
Report VulnerabilityWe appreciate responsible disclosure and may offer rewards for valid security reports.
Questions About Security?
If you have any questions about our security practices or need additional information for compliance purposes, please reach out.