Skip to content
Security at Aethis

Trust Center

Evaluate the security boundaries of Aethis, the AI-agent governance platform.

Aethis is in early access. This page describes our security design. Each section is labelled with what is live today and what is designed but not yet built.

  • AvailableLive today.
  • In developmentBeing built now.
  • DesignedSpecified, not built yet.
Last reviewed: 26 September 2026

Documents 10

Public resources

10 documents

Product security

  • Governed execution pathsDesigned
  • Policy evaluationDesigned
  • Action Record correlationDesigned
Review architecture

Data handling

  • Data categories and minimizationDesigned
  • Payload inspection and retentionDesigned
  • Credential separationDesigned
Review data handling

Access control

  • Organization and workspace rolesDesigned
  • Reviewer eligibilityDesigned
  • Agent authority controlsDesigned
Review access boundaries

Reports & assurance

SOC 2 audit
Not yet.
Penetration test
None completed yet. We'll publish a summary when one is done.
Data processing addendum
Draft for review.
Subprocessor register
Draft for review.
Discuss your requirements

Legal & privacy

The addendum and the register are drafts, open for review.

Security inquiries

Have a question about your deployment, data, or review process? Use the form or email security@aethis.io.

Security at Aethis is owned by Dominic Tan, founder. Contact: security@aethis.io.

Report a security concern

Deployment options Designed

We plan to release the core enforcement proxy as open source. The governance enforcement path could then run inside your own infrastructure, so governed traffic does not need to pass through Aethis-hosted infrastructure.

Status labels describe what is built today. Independent assurance is listed separately under Reports and assurance.