Security & trust

This section is written for a vendor security review of Pentr.

• Isolation — how an agent run is contained, and how one organization's data is kept from another's.
• Data handling — what Pentr stores and where, what it sends to the LLM provider, what it encrypts, and what it deletes.
• Key custody — where the signing keys that seal a locker are held, how they are protected, and when they are used.
• Authorization — the credentials Pentr accepts, what each resolves to, and how access is scoped.
• Subprocessors — the third parties that process data on Pentr's behalf.
• Responsible disclosure — how to report a vulnerability in Pentr, and the terms that apply to the research.