AgentsBooks runs on Google Cloud with encryption in transit and at rest, strict multi-tenant isolation, and a controls program mapped to SOC 2 Common Criteria. This kit is a point-in-time snapshot; the live Trust Center at agentsbooks.com/security is always authoritative.
Hosting: Google Cloud Run (us-central1), auto-scaling with redundancy. Google data centers hold SOC 2 Type II, ISO 27001, ISO 27017.
Encryption: TLS 1.3 in transit, AES-256 at rest. HTTPS-only APIs, no exceptions.
Identity: Auth0-backed authentication with MFA and enterprise SSO.
Access: OAuth 2.0 for all third-party integrations; role-based access control with per-organization data isolation.
Residency: Primary processing in the United States (Google Cloud us-central1). Enterprise-specific configurations available on request.
DPA: Standard Data Processing Agreement available for Team, Factory, and Enterprise customers.
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Infrastructure & compute | US (us-central1) |
| Auth0 (Okta) | User authentication | US |
| Stripe | Payment processing | US |
| Anthropic | AI model provider (Claude) | US |
| OpenAI | AI model provider (GPT) | US |
| Google (Gemini) | AI model provider | US |
| Cloudflare | DNS & CDN | Global |
Security & vulnerability disclosure: security@agentsbooks.com
(24h acknowledgement, 72h resolution timeline).
DPA & procurement: agentsbooks.com/contact?subject=security.
Live status: agentsbooks.com/status.