Security
- Credentials never reach an agent. Connector tokens are kept in a dedicated secrets vault, separate for each organization. Velo makes every tool call on the agent's behalf.
- Each run gets its own short-lived access, which is revoked the moment the run stops.
- Agents are limited to what you grant: the connectors, resources and tools you chose for them.
- Organizations are isolated. Every record belongs to one organization and is only visible within it.
- Your knowledge stays in your repository. The Company Brain lives in your GitHub, and every change to it is a commit.
- Your models, your account. Agents think on your organization's own Anthropic or Bedrock credentials.
- Every action is recorded in the audit log.
Last updated Sep 2026Next: Deployment