Control what agents can see and use.
Context boundaries. Per-source permissions. Redaction policies. Retention controls. Regional residency.
- Residency: Regional residency · tenant isolation · cryptographic boundaries.
- Scope: Context boundaries · Per-mission scope dictates what context an agent receives.
- Permit: Source permissions · Per-source allow/deny lists with policy-as-code.
- Redact: Redaction · PII / secrets redacted before context enters the prompt.
- Retain: Retention · Per-tenant retention windows with regional purge.
Four levers per tenant.
Data passes four checks on its way to an agent. Each one is a setting your tenant owns.
-
Context boundaries
Per-mission scope dictates what context an agent receives.
scope: per mission -
Source permissions
Per-source allow/deny lists with policy-as-code.
sources: allow / deny · policy-as-code -
Redaction
PII / secrets redacted before context enters the prompt.
redact: PII / secrets · before the prompt -
Retention
Per-tenant retention windows with regional purge.
retention: per tenant · regional purge
Trust posture, in five lines.
The same five lines run along every Engyn trust page. They are collected here so you can read them in one place.
The marked line is this page's subject: what an agent can reach stays inside your tenant's boundary.
- armed · 0 breaches ytd
- soc 2 · iso 27001 · nist ai rmf · hipaa · gdpr
- hardware-token gates · 412 audits / hour
- tenant isolation · cryptographic boundaries
- replayable decisions · tamper-evident ledger
Flip a lever. See what the agent gets.
A sample prompt context with all four levers on. Switch one off to see what it was keeping out of the agent's prompt.
- mission ticket reaches the agent
- design doc chunk reaches the agent
- chunk from another mission reaches the agent held back · Context boundaries
- records from a denied source reaches the agent held back · Source permissions
- customer email jane.doe@example.com reaches the agent masked · Redaction
- secret token tok_7f3a91c2 reaches the agent masked · Redaction
- record past its retention window reaches the agent purged in-region · Retention
2 rows reach the agent in full, 2 masked. 3 kept out.
Start a Software Factory pilot.
Connect one repository, one ticketing tool, and one mission. See evidence in days, not quarters.