Trust

Security and compliance

How we protect the requests your agents send and the decisions your people make.

SOC 2 Type II

withHuman is operated by Metoro Inc. Metoro's SOC 2 Type II report covers withHuman.

To request a copy, email [email protected] from your work address. We share the report under a nondisclosure agreement.

Hosting and encryption

The hosted service runs on Microsoft Azure. Data is encrypted in transit with TLS and encrypted at rest. Stored credentials and third-party tokens are encrypted again with keys we hold.

We never use your data to train models. The privacy policy lists our subprocessors.

Access control

  • Roles control what each member can see and do.
  • The audit log records every request, decision and change.
  • Paid plans add single sign-on, verified domains and directory sync (SCIM).

Open source

The hosted service runs on withHuman's open-source core. You can read the code on GitHub.

Report a vulnerability

Read our security policy to report a vulnerability.