Trust Center
The paperwork, on request
Security reviews stall when documents take a week to arrive. Request what your team needs and we will email a link straight away — tied to your address, valid for 72 hours, and logged on our side like every other access decision.
- Emailed, not shown
- Expires in 72 hours
- Signed and logged
What you can request
SOC 2 Type II report
The independent report and its scope. Requires NDA confirmation.
Penetration test summary
The most recent third-party test, with findings and remediation status.
Security whitepaper
Architecture, key management, agent identity lifecycle and data flows.
Business continuity plan
Recovery objectives, backup regime and incident response process.
Public documents — the Privacy Policy, Sub-processors list and DPA summary — need no request at all.
Request a document
The link goes to the address you enter, expires after 72 hours, and works up to three times. We log who requested what — see our Privacy Policy.
How the link works
We hold ourselves to the same rules
Selling verifiable access control and then emailing confidential reports as open attachments would be a poor advertisement. Document access uses the same pattern the product does.
Sent, not shown
The link is emailed rather than returned in the browser, which proves control of the address before anything leaves.
Signed and bound
Document, requester and expiry are all inside the signature, so none of them can be swapped in the URL.
72 hours, 3 uses
Long enough to reach the right reviewer, short enough that a forwarded link is worthless a week later.
Never public
Files live outside the media library, blocked at the web server, and are streamed only after the signature checks out.
Need something not listed?
Send your security questionnaire or vendor assessment to security@automentic.com and we will complete it.