An agent with access has to be governed.
Giving an agent the run of your workspace only works if it is contained, permissioned, and auditable. Sois is built that way from the ground up. The agent acts with the authority of the person it represents, never more.
- Isolated per business
- Permission-aware
- Encrypted
Contained, permissioned, auditable.
Isolation by design
Every business gets its own isolated data. Branded networks each have their own database and storage. Tenants never share data with one another.
Permission-aware agents
An agent can only use the tools the person it acts for is allowed to use. Permissions are enforced when tools are offered and again when they run. Access fails closed.
Encrypted
Data is encrypted in transit and at rest. Secrets and connected credentials live in an encrypted vault, retrieved only when an action needs them.
Bring your own keys
Networks can run on their own AI provider and payment account. Your most sensitive integrations stay under your control.
Budgeted and logged
Set a spend limit per integration and see exactly where every credit went. Agent activity is traceable, not a black box.
Your data rights
Access, correct, export, or delete your data at any time. Submit a request and it reaches our data team directly.
Data rightsIdentity verification, built in.
Sois includes an identity and document verification extension as part of the platform. There is no third-party contract to sign and nothing extra to integrate. It is enabled per network rather than being on for everyone.
Guided capture
A guided flow on the person's own phone: a government-issued photo ID and a live selfie, with automatic framing and quality checks before anything is submitted. Desktop hands off to the phone with a QR code.
Automated document checks
Document details are read and checked for consistency, and the photo is compared with the selfie. Every check returns a clear result with its reasons, so a person can always review the outcome.
Private by default
ID images are encrypted with dedicated keys, used only for the check, and deleted after a short retention window. Only the verification result is kept, and completion is reported to your workspace in real time.
Verification results are decision support for your business. Whether a check satisfies a specific legal or regulatory obligation depends on your jurisdiction and use case.
Security questions? Ask us.
We are happy to walk through isolation, permissions, and data handling for your use case.
- Isolated per business
- Permission-aware
- Encrypted in transit and at rest