Security your auditors can check.

How Camaan protects your data, governs what agents do, and gives you the evidence to prove it.

Report a vulnerability

security@camaan.ai (to confirm)

ISO/IEC 27001Our information security management is certified.

Signed audit ledgerEvery action and decision, chained and verifiable.

Access in the engineRow rules and masks apply inside the engine.

Secrets in a vaultCredentials never stored in tables or settings.

Your boundaryRun on your servers with your models.

Controls

How the platform protects you.

A summary. Detailed documentation is available under NDA.

Identity and access	Single sign-on, SCIM provisioning, roles and organisation-level access policies. People and agents act as themselves.
Agent governance	Per-action autonomy rules for read, write, run code, spend and delete. Approvals by a person with context.
Audit	Every action and decision signed and chained into a tamper-evident ledger, with reports by session, person and resource.
Data protection	Row rules and column masks enforced in the lake engine. Credentials held in a vault, never in tables or settings.
Models	Choose providers per model, including models on your own servers. Budgets and routing per model.
Deployment	Camaan cloud, your cloud account, or your own servers. Source available for review under licence.
Certification	ISO/IEC 27001 certification covers our information security management system.