SECURITY DOCUMENTATION

Security Overview

Access management

• Connections use native authentication and are scoped to workflows and linked to runs.
• Revoke a connection and every dependent workflow stops. Access granted on your behalf carries an expiry and is logged.
• SSO and MFA use the customer’s identity provider. Permissions are role-based, with approval rights separate from administrative rights.

Tenant and execution isolation

• Postgres row-level security isolates tenant data. Team workspaces separate workflows, credentials and data.
• Compiled workflows have no outbound network access and reach systems only through a credential proxy.
• On-screen execution uses a sandboxed container created per run and removed afterward.

Credential management

• WorkOS Vault holds credentials; Init stores references. Credentials are not passed to the model.
• On-screen credentials are injected at the keystroke and removed from persisted events and replays.
• Recordings use AES-256-GCM with a unique key per recording held in the vault.

Workflow approvals

• Customer policy defines approvers and actions that require approval before execution.
• Work proposed by Init requires customer approval.
• Init stops and requests clarification when documentation is insufficient.

Audit records

• Append-only logs capture actions, reasoning, screenshots and recordings, attached to the relevant ticket.
• Administrative changes are recorded in tenant-scoped audit tables.
• Each run is linked to its workflow version.

Compliance and operations

• SOC 2 Type I and Type II, ISO 27001, ISO 42001, HIPAA and GDPR initiatives are in progress, with independent audits. Reports are available under NDA upon completion.
• Casco conducts monthly penetration tests. Data is encrypted in transit and at rest.
• Zero data retention (ZDR) is enabled for all model providers used by Init.
• Logs are redacted at source and retained for 90 days.

Security questions and vulnerability reports: security@init.inc · Subprocessor list, policies and questionnaires available under NDA.