Trust & Security

Built for work where "trust us" isn't enough.

Compliance decisions have to survive audits, disputes and regulators. Every layer of Brokermatic — data, agents, integrations — is designed to prove what happened, not just do it.

Isolation

Tenant-scoped by construction

Every record, workflow run, agent action and API key is bound to a tenant. Isolation is enforced at the data layer — not by application convention — so one customer's certificates, requirements and decisions are never visible to another.

Credentials

Secrets referenced, never stored

Connector and collector configurations hold references to your secret store — never the credentials themselves. Keys stay in your vault, rotate on your schedule, and never land in application tables or logs.

Agent governance

Guardrails before every action

Each agent runs under an explicit contract: scope, allowed tools, memory window and approval boundary. External or high-stakes actions are guardrail-checked first and escalate to a human when the stakes are real — supervised, never autonomous.

Audit

An immutable decision log

Every run records its objective, inputs, outputs, guardrail results and the requirement-set snapshot it was judged against. A decision made in March is still explainable — line by line — in November.

Compliance posture

SOC 2-aligned, and honest about it.

Brokermatic's controls are built to the SOC 2 trust criteria — access control, change management, monitoring and incident response — with formal certification on our roadmap. We'll share our current control matrix and answer security questionnaires as part of any evaluation — and our live control status is always published at trust.brokermatic.ai.

Verification decisions are deterministic and reproducible: same package, same requirement-set snapshot, same result.

Encryption in transit & at rest
TLS everywhere; encrypted storage for documents and extracted data.
Least-privilege access
Role-based access for humans; contract-based scopes for agents.
Sandboxed extraction
Document extractors run in isolated sandboxes with no lateral access.
Run-level observability
Ingestion and workflow runs capture status, counts and errors; disabling a source never loses history.

Put our answers in front of your security team.

We'll walk through the control matrix, data flows and agent guardrails on a call.

Book a demo
B
brokermatic.ai
SolutionsPlatformWorkflowsAgentsIntegrationsBlog
© 2026 Brokermatic.ai · SOC 2 control status