Security & trust

An agent that acts needs a spine

Answering wrong is embarrassing. Acting wrong costs money and trust. So Inflection is built the other way round from a chatbot: every capability starts closed, and the rules that keep it closed are yours to write.

Talk to us Deployment options
01 / Principles

Four rules everything else follows from

01

Confirm first

Nothing that changes state runs without an explicit confirmation, with the value shown.

02

Closed by default

Reads are open. Writes are earned, flow by flow, and only after you verify them.

03

Refuse secrets

Card numbers and similar values are refused at the source, not filtered afterwards.

04

Prove it

Every action is recorded with the exact control it touched, so it can be replayed.

02 / The confirm gate

The customer authorises the action

Inflection proposes; a person decides. When Inflection is about to click or type, it stops and surfaces exactly what it intends to do — the action, the target, and the value — and waits.

  • 01The proposed action is shown in full before it runs.
  • 02Declining is a first-class outcome, not a dead end.
  • 03A confirmation covers one action — it is not a standing permission.
  • 04High-stakes actions can require a human on your side as well.
Proposedclick "Cancel & refund"
Targetdata-inflection-id="refund-btn"
Value$128.40 · Visa ···· 4429
Stateawaiting confirm
03 / Boundaries

You write the lines it cannot cross

01

Never-act list

Name the actions Inflection may only explain, never perform. Closing accounts, deleting data, anything irreversible.

declared
02

Protected fields

Mark inputs Inflection must never fill, even when a customer asks it to.

declared
03

Limits

Cap what an action may be worth. Above the line, it goes to a human.

declared
04

Learned boundaries

When an escalation reveals a rule, Inflection proposes it — and it stays a proposal until someone accepts it.

approved
04 / Sensitive data

Some values it will not touch

The safest way to handle a card number is never to receive one. Inflection refuses to type values that look like payment or identity numbers, regardless of who asked or how the request was phrased.

01

Refused at input

Payment-card and identity-number patterns are rejected before they reach an action.

02

Credentials stay out

Login details used for training are write-only — stored for replay, never returned or displayed.

03

Recorded structure, not values

Training a login captures the shape of the form, not what was typed into it.

05 / Identity

It acts for the person it can prove

Account-specific actions require the customer's own authenticated session. Inflection acts inside the app they are already signed into — it never holds a master key to your customer base, and it cannot reach another customer's account from one customer's conversation.

Anything Inflection cannot attribute to a verified session stays informational.

Sessioncustomer-authenticated
Scopethis account only
Unverified requestanswer only
Step-up availableyes
06 / Audit

Grounding is what makes it auditable

Because Inflection resolves a specific element rather than clicking a coordinate, every action has a name. That is the difference between a log you can defend and a video you have to interpret.

01

Per-action record

What ran, on which control, with what value, and who confirmed it.

02

Session replay

Step through any conversation exactly as it happened.

03

Escalation trail

What was attempted before a human took over.

04

Change history

Who verified a flow, who accepted a boundary, and when.

07 / Data & infrastructure

Where things live

01

Region pinning

Deployments are provisioned to a chosen region; conversation history and customer data stay in it.

regional
02

Encryption

Encrypted in transit, and at rest on managed storage.

standard
03

Isolation

Each workspace's knowledge, memories, flows, and credentials are scoped to that workspace.

per-workspace
04

Keys

Public keys for the browser, secret keys for the server. Rotatable, scoped, revocable.

scoped
05

Self-hosting

If none of the above is enough, run the whole stack yourself.

available
08 / Compliance

Where we actually are

Inflection is early, and we would rather tell you that than imply a badge we haven't earned. Here is the honest status.

Security architecture & controlsin place
Self-hosted / private deploymentavailable
SOC 2 Type IIon the roadmap
Penetration test reporton the roadmap
Security review for design partnerson request

If your procurement process needs something specific, ask — we will tell you plainly whether we have it today.

09 / Disclosure

Found something?

Report it to security@inflection.network. We will acknowledge quickly, keep you updated while we fix it, and credit you if you want the credit. No legal threats for good-faith research.

Security review — on requestTalk to us
Resolve —

Bring your security questionnaire. We will answer it straight, including the parts where the answer is "not yet".