Security & deployment

Data boundaries you can hand to procurement

Deployment models

Self-serve (Trial, Starter, Builder, Team): hosted by A2AC on Google Cloud Run in us-central1. Tenant data is isolated per account. Authentication uses Google Sign-In via Firebase Authentication. Model calls route to Google Vertex AI within our GCP project.

Enterprise: a dedicated instance of the platform — your own Cloud Run service and isolated Firestore data plane, operated by A2AC in the same GCP region. All components — task queue, Brain memory, receipt log, model routing — run on infrastructure serving only your tenant. Available direct or via Google Cloud Marketplace private offer.

Data handling

  • Task content, Brain memory, and receipts are stored per tenant in Firestore — a dedicated data plane on Enterprise, namespaced isolation on self-serve.
  • Receipts are SHA-256 hash-chained and append-only; execution history is tamper-evident and verifiable via the audit API.
  • Secrets are managed through Google Secret Manager; API keys are stored as salted hashes, never in plaintext.
  • All model traffic runs on Google Vertex AI inside Google Cloud — no third-party model providers, no data leaving GCP.
  • The public website stores no customer task content. Web analytics are limited to standard, aggregate telemetry.

Enterprise onboarding

  • No infrastructure required — A2AC provisions and operates your dedicated instance.
  • SSO via Google Sign-In; SAML/OIDC federation available on request.
  • Billing direct by card, or through Google Cloud Marketplace private offer against your existing GCP commitment.
  • Data residency: us-central1 today; additional regions on the roadmap.
  • Export everything, any time: tasks, memory, and the full receipt chain via the API.

Security roadmap

SOC 2 Type I is on the near-term roadmap for the hosted (self-serve) platform. Enterprise customers typically satisfy compliance requirements through their own cluster controls, since no customer data transits A2AC systems. Penetration testing summaries and a security questionnaire response pack are available on request.

Support & SLA

  • Starter/Builder: email support, 2 business day response target.
  • Team: priority email support, 1 business day response target.
  • Enterprise: named contact, 4 business hour response target for severity-1, upgrade assistance for chart releases.

Talk to us

Procurement questions, security reviews, or deployment planning: [email protected]. Enterprise purchasing runs through Google Cloud Marketplace.

TermsPrivacyPricing