Enterprise & Security
The buyer questions, answered.
One page for security, consent, and procurement. No PDFs to hunt for.
- Data isolation
- Per-workspace RLS
- Encryption
- TLS 1.2+ · at-rest
- Model training
- No customer data
- SOC 2
- Type I in progress
What we do by default
- TLS 1.2+ in transit; at-rest encryption on managed Postgres.
- Per-workspace isolation enforced by Row-Level Security.
- OAuth tokens for connected inboxes stored encrypted.
- No customer data used to train third-party models.
- Admin audit log inside the workspace.
- Secrets managed in the platform vault, never in the bundle.
Evaluating ASTRA for your team?
Open the Pilot scope or ask for a security review.