Authentication
Invite-only accounts, protected sessions and password recovery. Company access is checked against tenant membership.
SECURITY & HUMAN AUTHORITY
Your systems.
Your rules.
A responsibility never creates permission by itself.
Encryption
HTTPS protects public connections. Queued mail payloads are encrypted; managed storage and database protections are used.
Scoped access
Keyless workload identities and scoped secrets reduce credential exposure. Connections are bound to a company owner.
Approvals and pause
Reviewed actions, bounded budgets, pause and stop controls support human authority. Undo depends on the external system.
Data boundaries
Tenant checks and database boundaries separate company records. Qualification includes cross-tenant denial tests.
Auditability
Events and action receipts preserve evidence. No compliance certification is claimed.
Report a security issue.
Contact contact@avori.tech with a safe reproduction. Do not send credentials or customer data.
Independent security review, production recovery drills and enterprise acceptance remain pending. Agent Identity and Agent Guard are architectural integrations, not certifications or universal guarantees.