Enterprise
Agents your security team can sign off on
Put agents in front of customers and across teams with isolation, approvals and a full record of every step, on every plan from the first agent.
Isolated workspaces
Every request is bound to one organisation, and every database read and write is filtered by it.
Encrypted credentials
Model keys and channel credentials are encrypted with AES-256-GCM, each bound to its own record.
Roles
Owners, admins and members, so the people who publish agents are the people you choose.
Approvals
Actions that write or send can wait for a person, and agents ask when something is unclear.
Every step traced
Each run keeps its model calls, tool calls and timings, so any answer can be explained.
Evals before publish
Require evals to pass before a change goes live, compared against the last good baseline.
Your own model keys
Use your agreements with Anthropic, OpenAI, Google and others. Those calls are billed by them, not us.
Customer accounts stay theirs
Customers connect their own app accounts, so the agent acts with their access and nobody else's.