This page describes our security practices at the level of a help page. We share detailed security documentation, architecture reviews and completed questionnaires with customers on request. Write to support@casaconect.ai.
At a glance
Hosted in the EU
Casa Conect runs on Amazon Web Services in the European Union, in a private network behind a web application firewall.
Encrypted everywhere
TLS in transit and AES-256 at rest, with separate managed keys for different kinds of data.
Passwordless sign-in with MFA
Email-code sign-in, authenticator-app MFA, session management, and re-authentication for sensitive changes.
Tenant isolation by design
Every request is authorized against a verified identity and organization, and data is separated by organization at every layer.
A contained agent
The agent acts with the user’s access and no more, treats outside content as data, and loses its riskiest tools whenever nobody is watching.
Transparent AI data handling
Which AI services see your content, what they receive, and how to keep model processing in the EU.
Hardened email
Inbound mail is authenticated, scanned and gated before the agent sees it. Unknown senders wait for a person.
Scanned uploads
Every uploaded file is scanned for malware before it can be opened.
Principles
1
Least privilege, enforced in code
Access is decided on the server from a verified identity, never from what the browser claims. The agent inherits the acting user’s access. It has none of its own.
2
Fail closed
When a check cannot be completed, the answer is no. An incomplete virus scan holds the email. A failed safety review holds the action. A PIN check that cannot run refuses the attempt.
3
A person decides what leaves
Email to anyone outside the organization is drafted for approval. Sharing with outside parties always asks first. Edits to existing documents are tracked changes.
4
Keep content out of telemetry
Analytics never record document text, email bodies or conversation content. Session replay masks all text and blocks content areas entirely. Error reports carry the shape of a request, not its values.