DMZAgentAgent Stream
Open a workspace Contact
DOCUMENT CX-SEC · TRUST POSTURE

Security and trust at DMZAgent.

DMZAgent keeps the record of consequential decisions an AI agent made. That record has to be reliable, and the system that keeps it has to be defensible. This page describes the controls in place today, the audits underway, and how to reach the security team.

Last reviewed 2026-05-19 SOC 2 Type II in progress Vulnerability disclosure open
Section 1 · Audit posture

What DMZAgent is audited against.

DMZAgent is in active preparation for SOC 2 Type II. The Type I report is targeted for Q3 2026; Type II follows the full observation window. Customers under a non-disclosure agreement can see the current report and the active control matrix on request.

  • SOC 2 Type II In progress. Control framework in place; observation window underway; auditor engaged.
  • ISO 27001 Planned. Gap assessment scheduled following SOC 2 Type II issuance.
  • HIPAA Business Associate Agreement available for customers in regulated clinical settings. See sales.
  • GDPR / UK GDPR Data Processing Addendum available. Standard Contractual Clauses for cross-border transfers. See the DPA.
  • Penetration testing External penetration test on each major release. Letter of attestation available under NDA.
  • Audit posture for controlled records Records marked as controlled are subject to a separate retention and review path; release requires two-party authorization recorded to the ledger.
Section 2 · Encryption

Encryption at rest and in transit.

Every byte DMZAgent stores is encrypted at rest. Every byte DMZAgent moves on the network is encrypted in transit. Keys are managed by the underlying edge platform; rotation is automated and audited.

In transit

TLS 1.3 across all public surfaces.

Marketing, dashboard, API, and webhooks terminate TLS 1.3 at the edge. Internal service-to-service traffic between the API Worker and the reasoning container runs over mutually authenticated channels inside the cloud provider's private network.

At rest

AES-256 across all persistent stores.

The primary record store (D1), the snapshot bucket (R2), and the queue (KV) all encrypt at rest with provider- managed keys. Customer-managed key envelopes are available on the self-hosted tier by agreement.

Secrets

Injected, never committed.

API keys, signing keys, and provider credentials live in the edge secret store and are injected into the runtime at startup. No secret ever lands in a repo, an image, or a log line. Workspace API keys are hashed at rest and revocable from the dashboard.

Key rotation

Quarterly rotation, on-demand for cause.

Platform keys rotate on a quarterly cadence. Any suspected compromise triggers an out-of-band rotation and a notification to affected workspaces within the breach window required by the DPA.

Section 3 · Tamper-evident ledger

Why the record can be trusted to hold up.

DMZAgent is record-keeping infrastructure. The record has to be verifiable, and a customer or an auditor has to be able to detect any change after the fact. The ledger is hash-chained for that reason.

Each ledger entry references the cryptographic hash of the prior entry. The chain head is published periodically to a tamper-evident anchor under a workspace-controlled identifier. Any modification to a historical entry breaks the chain at that point and is detectable on the next verification pass. Snapshots of Canon manifests are written to immutable object storage with read-only retention; the manifest itself is signed and the signature is logged.

What this protects against. Insider modification, regulatory backdating, and silent deletion of evidence packets. It does not protect against a customer being compromised at the application layer and writing wrong events on purpose. The chain only guarantees that what was written cannot be silently changed after it was written.
Section 4 · Network model

Where DMZAgent runs and how the parts talk.

DMZAgent is built on a globally distributed edge platform. The control plane runs as edge workers; the reasoning plane runs in managed containers reached over a private service binding. There is no public endpoint on the reasoning plane.

  • Edge entry point All public traffic terminates at the edge worker fleet. DDoS protection, WAF, and bot management are layered at this tier.
  • Reasoning plane The reasoning service runs in managed containers reached only over a private service binding from the API Worker. No inbound public route exists.
  • Record store Per-region D1 instances hold the canonical record. Reads stay in-region; cross-region replication is opt-in and described in the DPA.
  • Snapshot store R2 buckets hold canonical Canon manifests and audit packet exports under workspace-scoped paths.
  • Outbound model calls Reasoning calls leave the cluster over named egress IPs with mTLS. Customer-supplied model endpoints are honored on the self-hosted tier.
Section 5 · Data residency and retention

Where customer data lives, and for how long.

  • Default region United States — North Virginia primary, Oregon failover.
  • EU region Frankfurt primary, Dublin failover. Selectable at workspace provisioning. Data does not leave the selected region for storage.
  • UK region London. Available on request.
  • Retention — behavior events Retained for the term of the agreement plus the regulatory hold window the customer specifies. Default ninety days post-termination.
  • Retention — audit packets and ledger Retained for seven years after the agreement ends, consistent with common audit retention windows. Customer-configurable in the DPA.
  • Deletion on request Within thirty days, with a certificate of destruction issued to the workspace administrator.
Section 6 · Access control

Who can see what, on the customer side and ours.

Customer side

Role-scoped, workspace-bound.

Five roles: tenant administrator, analyst, auditor, viewer, and the cross-tenant service operator role used only by DMZAgent staff under audit. Every access to a controlled record writes a ledger entry. SSO via SAML and OIDC is available on the team and enterprise tiers.

DMZAgent side

Least privilege, logged, reviewed.

Production access is brokered through short-lived, scoped credentials issued against a documented break- glass procedure. Every production session writes to the same ledger customers see. Quarterly access reviews confirm that only current staff hold access.

API keys

Dashboard-issued, workspace-scoped, revocable.

SDK and AgentStream clients authenticate with bearer API keys issued from the dashboard, scoped to a single workspace, and revocable at any time. Browser session cookies are never accepted on SDK endpoints.

Audit trail

Every consequential action.

Login, role change, key issue, key revoke, controlled record release, and configuration change are recorded to the workspace ledger and visible to the auditor role.

Section 7 · Vulnerability disclosure

How to report something you found.

DMZAgent welcomes coordinated disclosure. Send the report to the security pathway on the contact page or directly to security@dmzagent.com. Encrypted mail is welcome; the PGP key is published on the contact page.

  • Acknowledgement Same business day, Pacific hours.
  • Triage Severity assignment within two business days, with the reporter copied on the triage note.
  • Remediation plan Documented within five business days. Critical issues are mitigated immediately while the longer fix is staged.
  • Disclosure window Ninety days from acknowledgement, or earlier by agreement with the reporter.
  • Safe harbor Good-faith research that respects customer data, avoids service degradation, and follows the disclosure window is welcomed and will not be pursued.
Reporting a live incident in your workspace? Email security@dmzagent.com with the workspace slug and a short description. The on-call engineer is paged on receipt and acknowledges in-band within fifteen minutes during business hours.
Section 8 · Agreements

The paperwork that backs this page.

The trust posture on this page is published; the binding version lives in the agreements your account executive provides. Plain-language summaries are linked below.

Need to evaluate DMZAgent against your control framework? Request the current SOC 2 report, penetration-test letter, and architecture overview from sales. Materials are released under NDA.
Section 9 · Accessibility

The same controls reach everyone.

DMZAgent publishes a conformance posture against the Section 508 Refresh and WCAG 2.1 Level AA. Both the public marketing site and the product dashboard are built to that target. The posture below reflects the state of the public commitments; the internal audit log behind each is available on request.

  • Standards targeted WCAG 2.1 Level AA across every public surface. Section 508 Refresh §1194.22 (Web) and §1194.31 (Functional Performance) for the product dashboard and any documentation a customer or auditor reaches without an account.
  • Keyboard reachability Every interactive control is keyboard reachable in the visible focus order. A skip link on every marketing page and a focused-visible outline on every interactive element satisfy WCAG 2.4.1 and 2.4.7.
  • Names, roles, and values Form fields are programmatically associated with their visible labels. Icon-only buttons carry an accessible name. Destructive confirmations open a focus-trapped dialog with role=dialog and aria-modal in place of the browser confirm() dialog. Satisfies WCAG 1.3.1 and 4.1.2.
  • Color and contrast Body text and interactive controls meet WCAG 1.4.3 at Level AA contrast on the federal navy / paper palette. The federal palette tokens are pinned in our internal design system so off-token combinations cannot ship.
  • Documented exceptions Known gaps and their remediation timelines are tracked internally and disclosed on request under NDA. There is no exemption for an accessibility regression — a failing page is a release blocker.
  • How to report a barrier Anyone — customer or not — can report an accessibility issue through contact. We acknowledge within two business days and publish a remediation plan within ten. Reports are triaged on the same queue as security disclosures.
Need the current VPAT? Section-508-style Accessibility Conformance Reports (formatted as VPAT 2.4 Rev INT) are issued on request through sales. They cover the marketing site, the product dashboard, and our published API documentation.