Security and evidence
Proof you can hand to an auditor
Decionis Auto is built on pieces of Decionis you can inspect today: signed decision dossiers, gateways that hold your credentials, and shadow mode. Here is what each one gives you, and where to check it yourself.
Decionis Auto Planned
Proven
A signed record for every decision
Every decision the Decionis Protocol makes produces a decision dossier: what was asked, which policy decided it, the verdict and, when a person decided, who approved. It is signed, so anyone can check it has not changed, without access to your systems.
Contained
Credentials stay at the edge
A step that acts runs on your own gateway, which holds the credential for the system it calls. The workflow refers to the credential by name and never shows or accepts its value. Once your gateway enforces, the tool that runs the workflow no longer needs your API credential at all.
Hosted gateway enforcement Private beta
Opened per workspace. Until then your gateway runs in shadow and your step keeps its own credential. How it works with your current tool.
Shadow first
See what it would do before it does anything
Every new workflow starts in shadow. Your steps run as before and each decision is recorded as “would have”, so you can tune the policy on real traffic before anything is stopped.
Would allowWould escalateWould block
Report a vulnerability
Found a security issue?
Email security@decionis.com. Our disclosure policy and security posture are on the Decionis trust page.
Automations you can answer for.
Tell us which automation you have to answer for. In the private beta you route its steps through your own gateway from the tool you use today, and move to Decionis Auto when it opens.
Join the private beta
Decionis Auto PlannedYour existing tool Private beta