Built on Trust

Agency puts customers first with thoughtful design, strong safeguards, and responsible data practices. We protect your data like it’s our own.

Caring for 35,000+ end customers through our design partners

Designed for Trust

Our Security Team

Security at Agency is built into how we operate, across our infrastructure, product, and day-to-day operations. Our team and advisors work together to apply strong protections and continuously monitor the platform.

No Model Training

Your data belongs to YOU. We don’t use your data to train or build models and neither do our partners.

Contractual Commitments

Agency’s contract documents include enforceable commitments around data protection, data access, and incident response, aligned with leading security and privacy standards including SOC 2, ISO 27001, and GDPR. Our obligations are auditable and designed to provide customers with a higher-than-standard level of assurance.

Customer trust is at the core of everything we do.

That’s why Agency is designed to be secure, reliable, and respectful of our Customers’ data.

At Agency, security is part of how we build and operate the platform. We use strong access controls, monitor our systems continuously, and regularly test our defenses so we can adapt as risks change and keep customer trust intact.

Visit Our Trust Center

Frequently Asked Questions

  • How does Agency define Customer Content?

    Agency defines “Customer Content” as any content, data, or information submitted or input to Agency by the Customer.

  • How does Agency protect its customers’ data?

    Agency encrypts customer data both at rest and in transit and enforces strong access controls across the platform. Neither Agency nor its subprocessors train models on customer data. Our security controls are validated through annual SOC 2 Type II and ISO 27001 audits, and we maintain a rigorous vetting process for subprocessors and external model providers. Customer data is logically segregated by customer at the database level.

  • How does Agency ensure that no one is training on its customers’ data?

    Agency works only with model providers that support zero data retention and contractually confirms those commitments.

  • Where is Customer Data hosted and processed?

    Agency hosts its cloud environment in AWS in the United States.

  • How frequently do you conduct security audits and vulnerability assessments?

    Agency conducts automated vulnerability scans, annual third party penetration tests, and maintains continuous security monitoring.

Discover what Kai can do for your team