Security and privacy

Built for the business you’ve spent years building.

Hand work to AI without handing over the keys. Every agent works in its own computer, starts with no access, and asks you before it connects to anything.

  • Hosted in Ireland, EU
  • Never trained on your data
  • SOC 2 Type I report
  • ISO/IEC 27001 (Mirantis)
How a request moves

Your agents ask. You decide.

Every agent works in a computer of its own, walled off from your other agents and from the keys to your tools. Here is what happens when one needs access.

  1. The agent asks

    Theo, your support agent, needs Gmail to answer customer email. Theo asks you on a card in the conversation, then waits.

  2. You decide

    Allow it, or choose “Not now”. Nothing changes until you do.

  3. The vault connects

    You sign in once. The credential is stored in the vault, outside the agent’s computer.

  4. The work flows

    Theo’s requests pass through the vault, which adds the credential on the way. Theo never sees it.

Least privilege, by design

Every agent starts with nothing.

Access is earned one approval at a time, so each agent holds only what its job needs.

  • No access by default

    A new agent can read the public web and nothing more. Every tool, website and sign-in is something you grant.

  • It asks for each connection

    When an agent needs Gmail, your calendar or a website, it asks on a card in the conversation. You approve in place, or say not now.

  • It never sees a password

    Sign-ins go straight into the vault. Agents work through the connection, never with the credential itself.

  • New colleagues stay in bounds

    When Irene proposes a new agent, the proposal can’t grant open internet access or connect tools for it. The new agent starts with nothing and asks for itself.

Departments

Sales never sees Finance’s credentials.

Split your workspace into departments. Each one keeps its own agents, connections and credentials, and colleagues get only the departments you invite them to.

Sales Own credentials
  • Lina Lead follow-up
2 colleaguesGmail · Google Calendar
Finance Own credentials
  • Mara Bookkeeping
1 colleagueGoogle Drive
Support Own credentials
  • Theo Customer email
  • Nia Help articles
2 colleaguesGmail · Notion
Your data

Your data stays in the EU, and stays yours.

Hosted in Ireland, EU
Your agents, their computers and your data run in the EU.
AI models in the EU
The models your agents think with run in the EU too.
Never used for training
We never use your data to train AI models, and neither do the providers whose models we run.
No advertising business
We sell software, not attention. Your work never feeds an ad system.
Kept for 90 days after you leave
If a plan lapses, your agents pause and your data is kept for 90 days. We email you before anything is deleted.
Assurance

Independently reviewed.

For your security review: what we hold, and exactly what it covers.

SOC 2 Type I report

Irene Agent runs on the Lens Agents platform, deployed on our own infrastructure. The platform is covered by our SOC 2 Type I report as Lens Agents.

Request the report
Questions

What security teams ask us.

Can an agent do something I didn’t approve?

Agents work only within the access you have granted. Anything new, such as a tool, a website or a sign-in, needs your approval on a card first. Irene can make mistakes, so she asks before anything consequential.

Can my colleagues see everything?

They see what their department gives them. You choose what someone gets when you invite them, and each department keeps its own agents, connections and credentials.

Where is my data stored?

In the EU. Your agents, your data and the AI models they use run in the EU, hosted in Ireland.

Do you train AI models on my data?

No. We never use your data to train AI models, and neither do the providers whose models we run.

Can I see your SOC 2 report?

Yes. Irene Agent runs on the Lens Agents platform, deployed on our own infrastructure. The platform is covered by our SOC 2 Type I report as Lens Agents. Ask us for a copy through Contact sales.

What happens to my data if I cancel?

Your plan keeps working until the end of the period you paid for. After that your agents pause and your data is kept for 90 days, with emails before anything is deleted.

Found a vulnerability?

Tell us at security@ireneagent.ai. Our security.txt has the details.

Talk to us about a security review