Encryption & Least-Privilege Access
TLS 1.3 encryption, AES-256 token storage, and granular OAuth permission scoping.
Every interaction between your browser, AgentCloud servers, and integrated SaaS APIs is fortified with modern cryptographic standards.
Encryption Standards#
- In Transit: All network communications are mandated over TLS 1.3 with automated HSTS header enforcement.
- At Rest: Database disks, backups, and user uploads are encrypted with AES-256.
- Credential Vault: Third-party OAuth tokens and API secrets are encrypted using authenticated envelope keys.
Principle of Least Privilege#
When you authorize an integration, AgentCloud requests only the exact scopes necessary for that specialist's workflows. An agent that generates sales summaries never requests write access to your product inventory.
Next Steps#
Learn how to exercise GDPR data export and deletion rights.