Trust & Security

Tasklet is built from the ground up to securely handle your most sensitive business data, integration credentials, and service connections.

SOC 2 compliant

Tasklet’s controls have been reviewed by an independent auditor and attested to be SOC 2 compliant. This indicates that our handling of customer data meets key security standards. Learn more about SOC (System and Organization Controls) and visit our Trust Center for additional detail about our commitment to security and customer data protection.

Our team’s security expertise

Before Tasklet, our engineering team built high-security, high-reliability data systems at Google Cloud. We have deep experience building and operating cloud products that handle mission-critical business data.

How Tasklet protects your data

Secure infrastructure

• All data is stored in Google Cloud’s highly secure & compliant data centers
• Data is encrypted at rest using AES-256 and encrypted in transit using TLS 1.2+
• We employ a “defense in depth” philosophy where every system is protected by multiple layers of security

Agent permission boundaries

Every Tasklet agent runs in an isolated cloud environment, and each agent has its own permission boundary. This helps you control what data and tools it can access, without the agent needing access to your computer.

Tool permissions are configured separately for each agent, so different agents can receive different levels of access to the same connection.

Your data stays yours

• We never sell your data
• Your data is never used to train third-party AI models
• Customer data is only provided to subprocessors as necessary to deliver our service
• Your conversation data is only accessed by the Tasklet team with your permission, which you can revoke at any time from settings

Credential security

Credentials for connections are encrypted in a secure vault.

Internal access controls

Access to customer data by Tasklet team members is tightly controlled through a centralized admin dashboard. No customer data is ever accessed by an employee without explicit customer permission.

Subprocessors

We keep both the subprocessors we use and the data we send to them to an absolute minimum. Our current list of subprocessors can be found at https://trust.tasklet.ai. Currently we use:

Compliance

If your organization has specific compliance requirements, please contact us at sales@tasklet.ai.

Vulnerability disclosure

At Tasklet, we believe that great products require stellar security. No software is perfect and sometimes vulnerabilities happen. We believe working with security researchers is essential in keeping our software secure. If you have found a vulnerability in our software, we encourage you to report it to us so we can work with you to resolve the issue.

Disclosure policy:

• We will make a reasonable effort to fix the vulnerability as soon as you have notified us about the vulnerability.
• We ask you do not disclose the vulnerability to third-parties or the public until we have had a reasonable time to fix the issue.
• Only use accounts you own or for which you have explicit permission from the owner to use.
• We ask you make a good faith effort to avoid privacy violations, degradation of service, or loss of data.
• Bugs should be reported to security@tasklet.ai. Bug bounties may be available for reports at our sole discretion.

Exclusions: Denial-of-service attacks (DoS), spamming, social engineering of Tasklet employees, clients, or users, and exploits that involve any physical form of attack or damage.

We consider security research and activity performed in accordance to this policy as authorized.

Deleting your account & data

If you wish to permanently delete your account and all associated data, you can do so at any time through support settings. This action cannot be undone.

Privacy Policy & Terms of Service

For additional information about our privacy practices and terms of use, see our Privacy Policy and Terms of Service.