Security

Your code stays yours.

Your rules run on your computers. Prompts, conversations and file contents stay on them, and each decision becomes a signed record you can show an auditor.

Where each part runs

Never leaves your computer

PromptsConversationsFile contentsSigning keys

See everything a computer sends →

Audits

Evidence your auditors ask for.

When a client, auditor or your own board asks what your AI agents did, the answer is ready.

A signed record of every decision

What the agent tried, the rule that applied and what happened, signed on the computer that decided.

Every change logged

Who changed which rule, who unblocked what and when, in an audit log you can download.

A monthly report

What your agents did and what was blocked, ready to forward.

Evidence packs

A period's records in one download for an audit, on the Audit plan.

Built around the controls SOC 2 and ISO 27001 audits look at

  • Company sign-in (SSO) and roles
  • An audit log of every workspace change
  • Data encrypted in transit and at rest
  • Your data exported or deleted when you ask
  • Approvals recorded with who approved them
  • Your workspace held in one region

We use it ourselves

Scopebond protects the AI that builds Scopebond.

Our own AI coding agents work under Scopebond every day. It keeps them away from their own safety settings, our build and release workflows, and packages it doesn't trust.

Built in the open.

Read exactly what runs on your computers.

Open source

An engine anyone can read

What checks every action on your computers is open source under the Apache-2.0 license: your rules, the starter protections and the signed records. Core protection is never behind a paid plan.

Read the source →

Scopebond Cloud

Protection packs, kept current by Scopebond

Protection packs arrive on every computer automatically. Every pack is signed, and each computer checks the signature before it uses one.

See what's covered →

Enterprise

Enterprise, without the sales calls.

See your price on the page, get your formal quote by email, then sign and pay by invoice. No meetings needed.

1. See your priceRight on the Enterprise page.
2. Get your quoteBy email, in a minute.
3. Sign and pay by invoiceOne yearly agreement.

For your security review: the security overview (PDF) and our answers to the CAIQ Lite questionnaire (CSV).

Your security team has a question? Talk to us

Report a security issue

Email security@scopebond.com. Reports go straight to the people who build Scopebond, and we work with you on a fix before anything is disclosed.

Try it on your own agent.

Set up in a few minutes. Free for one agent.

Scopebond is made by Avouro LLC, Michigan, USA.

Talk to us

Tell us what your security review needs. We reply by email.