Security
Your work stays yours.
How cyborg handles your keys, code and team, and where our compliance work stands.
- Keys
- Yours
- Sign-up
- Company email
- Frameworks
- SOC 2, ISO 27001, HIPAA, CMMC
- Status
- In progress with Ceel
How it's built
- 01
Your keys
Agents run on your team's own Claude, ChatGPT or Gemini accounts or API keys, and requests go to the lab.
- 02
Company email only
Only company addresses can sign up, and sign-up is open to US and Canada based companies.
- 03
A sandbox per mission
Each mission runs in its own sandbox, on its own branch, so one mission can't touch another's work.
- 04
Tokens kept apart
Connections are stored encrypted. On hosted repositories, agents never hold the access tokens.
Compliance, in progress.
We're working through these with our compliance partner, Ceel.
Compliance Partner
Ceel is also one of our first customers. Certification comes from independent auditors, not from Ceel or from us.
| Framework | Covers | Status |
|---|---|---|
| SOC 2 | Security controls: Type I, then Type II | In progress |
| ISO 27001 | Information security management | In progress |
| HIPAA | US health information | In progress |
| CMMC | US defense supply chain | In progress |
Nothing is certified yet.
Found a security issue, or need our answers for a review?