Security

Entity is designed for structured operational work. Security matters at the platform level and at the workspace, organization, and execution boundaries that the product models directly.

Platform security

• Encrypted transport for application and API traffic
• Environment-specific secret management and key isolation
• Organization-scoped API access to prevent cross-tenant access
• Operational logging and health monitoring for core services

Workspace and execution boundaries

• Organization workspaces and task workspaces are kept separate
• Workspace file access is constrained to the intended workspace root
• Task assignment, queue state, and workspace ownership move together
• Borealis-backed execution can be used for isolated task environments

Data protection

• Data at rest and in transit should be encrypted in deployed environments
• Secrets should be managed via environment configuration and key management services
• Billing, memory, artifacts, and activity records are scoped to the owning organization

Responsible disclosure

If you discover a security issue affecting Entity or the website, contact contact@entityhq.ai with reproduction details.

See the Vulnerability Disclosure Policy for reporting expectations and scope details.