Security you can verify, governance you can prove.
Tokoaido deploys AI agents that act on real systems, so security, privacy and governance are the substrate, not an add-on. Here is exactly how we protect your data and keep autonomy accountable.
Defense in depth, from identity to the audit log.
- SAML / OIDC single sign-on
- SCIM user provisioning
- RBAC: Owner / Admin / Operator / Viewer
- Least-privilege, tool-scoped agents
- Encryption in transit (TLS) and at rest
- Strict multi-tenant isolation
- Session tokens in HttpOnly cookies
- Secrets held in a vault abstraction
- Immutable, hash-chained audit trail
- Tamper-evident provenance on every decision
- Full lineage: source → model → action
- Exportable evidence for auditors
- Human-in-the-loop, risk-tiered approvals
- Earned, progressive agent autonomy
- Continuous evaluation & regression gates
- Guardrail synthesis from violations
- Your systems remain the system of record
- Data residency by region
- Configurable retention
- Data-subject request support
- Managed SaaS or your own VPC
- On-prem via Docker / Kubernetes
- Air-gapped-capable
- No inbound access to your OT required
A line agents cannot cross, by construction.
For operational technology, safety is not a policy toggle. Writes route through MES/SCADA with human approval; a direct PLC write, or any interaction with a Safety Instrumented System, is blocked in the architecture itself. No prompt, configuration, or model can override it.
Controls mapped to the frameworks your auditors use.
Tokoaido is at design-partner stage: formal certifications are in progress, and the platform's architecture is built to meet them. We'll share the current attestation status and evidence under NDA.
Deploy where your data must live.
Who touches your data.
The definitive, named sub-processor list is provided with your DPA and kept current; you're notified of material changes.
Get what your review needs.
Bring us your security review.
We'll walk your team through the architecture, controls, and deployment model, and answer the hard questions.