Security is part of the workflow.

We use defence-in-depth practices across application design, infrastructure, access management, monitoring, and incident response. Security controls are reviewed as the product and its risk profile evolve.

Access to production systems and customer information is limited to authorised personnel with a business need. We use role-based access principles, authentication controls, and auditability designed to reduce the risk of inappropriate access.

We use encryption in transit and safeguards designed to protect stored information. Customers should protect workspace credentials, use least-privilege integration tokens, and avoid placing secrets in prompts or workflow content.

ADL supports workspace-level configuration, integration settings, and operational logs so teams can review workflow behaviour. You remain responsible for setting appropriate permissions, reviewing agent outputs, and approving high-impact actions in your workflows.

We evaluate security reports, maintain dependencies, and prioritise remediation based on risk. To report a suspected vulnerability responsibly, email hello@agentdesignlabs.com with sufficient detail to reproduce the issue. Please do not access data that does not belong to you or disrupt the service.

We maintain processes designed to investigate, contain, and remediate security incidents. Where required by applicable law, we will notify affected customers or individuals of a confirmed incident involving their personal data.