How we work Security & compliance
Security & compliance
When agents work in your environment, you need to know exactly what they can touch and who answers for them. Every agent action runs within limits a person has set, passes through a gate, and leaves a record.
Identity
Access follows least privilege: people get only the permissions their role needs. Agents get the same treatment: each has a defined scope, and no action happens without a policy a person set.
Endpoints
Virtual desktops from secure infrastructure protect workspaces and data, whatever the device or location.
Data protection
Confidential and personal data is encrypted at rest and in transit by default. We comply with Singapore's PDPA and the Philippines Data Privacy Act of 2012. Customer data stays in the customer's region.
Audit trail
Every finding, decision and action records what it was based on, who approved it, and what changed.
Certified
ISO/IEC 27001:2022 · SOC 2 Type 2Certificates and reports available under NDA.
Frequently asked questions
Is Human Managed ISO 27001 certified?
Yes, ISO/IEC 27001:2022.
Is Human Managed SOC 2 compliant?
Yes, SOC 2 Type 2. Reports are available on request.
Can AI agents act without approval?
Only within limits a person has set and approved. Every action is logged with its evidence and approver.
Where is customer data stored?
In the customer's region.