Security
Know what your agents
can access and do.
See how Adapt runs code, connects to services and records execution. Pick the deployment and model providers your data needs.
HubSpotRead dealsAllowAskOff
GmailSend emailAllowAskOff
SlackPost in #renewalsAllowAskOff
NotionRead docsAllowAskOff
Google WorkspaceRead the shared driveAllowAskOff
ZendeskRead ticketsAllowAskOff
GrainRead call notesAllowAskOff
GCP / BigQueryQuery usageAllowAskOff
AffinityUpdate contactsAllowAskOff
StripeChange a priceAllowAskOff
LinearCreate issuesAllowAskOff
GitHubRead codeAllowAskOffHi Dana,
Ahead of Thursday’s security review, here are our SOC 2 Type II report and the summary of this year’s pen test. Both cover the period through September.
Our DPA and subprocessor list are on the trust page if your team needs them. Happy to set up a call with our security lead.
Best,
Priya
Send emailPriya Shah via RenewalsAction succeededJust nowRead dealsPriya Shah via RenewalsAction succeeded2 min agoPost in #renewalsPriya Shah via RenewalsAction succeeded9 min agoChange a pricePriya Shah via RenewalsAction denied1 hour agoRead docsPriya Shah via RenewalsAction succeeded1 hour agoRead call notesPriya Shah via RenewalsAction succeeded2 hours agoRead ticketsPriya Shah via RenewalsAction succeeded2 hours agoRead dealsPriya Shah via RenewalsAction succeeded3 hours agoSend emailPriya Shah via RenewalsAction succeeded4 hours agoQuery usagePriya Shah via RenewalsAction succeeded5 hours agoRead codePriya Shah via RenewalsAction denied6 hours agoPost in #renewalsPriya Shah via RenewalsAction succeededYesterdayControls
A foundation for controlled execution.
Separate execution environmentsAgents run code in per-session sandboxes, on the compute each workflow needs.
Scoped service credentialsVaults and secret bindings give each workflow scoped, revocable credentials.
Visible executionTraces show each run’s tool calls, so you can investigate unexpected results.
Deployment and data
Review the whole path. From input to output.
Settle these before connecting sensitive systems: your data flow depends on them.
01
Where the platform runs
Your infrastructure or a managed deployment, and where compute and files live.
02
What the agent can reach
List the systems it needs and scope each connection to the minimum access.
03
What reaches a model
Pick a provider and review what’s sent; its terms govern retention and training.
04
What your review requires
Identity, approval, retention, residency and reporting: we confirm the controls.
Compliance
Built for your security review.
SOC 2 Type IIOur security controls, tested by an independent auditor over time.
GDPRA data processing addendum for personal data from the EU.
CCPAPrivacy rights for California residents, honoured.
Responsible disclosure
Found a vulnerability? Tell us.
Send us the details; see the security documentation for guidance.
Report itEmail security@adapt.com with a description of the vulnerability.
Include the detailsComponent, steps to reproduce and impact, never credentials or customer data.
Help us reproduce itWe may ask for more information while we investigate.