Skip to main content
Security

Enterprise grade by design

We handle the tough stuff so you can focus on your business.


Security & compliance

Certifications, access control, and encryption that hold up to enterprise procurement.

ISO 27001 certified

Our information security management system is certified to ISO/IEC 27001:2022, and its scope covers all of Agileday's operations.

GDPR compliant, local data residency

Your data and its backups stay in the region you choose.

Single-tenant architecture (Enterprise)

Your workspace runs in its own isolated environment and private network.

Google & Microsoft 365 sign-in + SCIM 2.0

Your team signs in with their work account in one click, and your IT team has nothing to configure. SCIM adds and removes users automatically.

Role-based access control

Everyone sees only the data and functions their role needs.

Audit log of every change

Changes and deletions are recorded, and you can read the log through the API.

AES-256 at rest, TLS 1.2+ in transit

Your data is encrypted everywhere it's stored or sent.

Isolated, immutable backups

Daily backups with point-in-time recovery, kept apart from production and protected from deletion.

Web application firewall + DDoS protection

Common attacks like XSS and SQL injection are blocked before they reach the application.

Critical vulnerabilities fixed within 48 hours

Every vulnerability has a fixed deadline by severity, with continuous dependency scanning in CI.

Incident notification within 24 hours

Our incident response follows NIS2, with an initial notification within 24 hours of us becoming aware.

Your data never trains third-party models

Your content is never used to train anyone else's models.


Performance & reliability

Availability and response times are measured continuously, with alerting when they slip.

99.9% uptime SLA

Measured monthly across the API and the app.

Fast responses, monitored continuously

Response times, availability and background jobs each have their own targets and alerting.


Integration architecture

Open, documented interfaces so Agileday fits the systems you already run.

REST API for custom integrations

Build your own integrations on our documented API.

MCP server for AI tools

Connect your own AI tools and agents to Agileday over MCP.

OAuth2 for third-party permissions

Grant and revoke third-party access without sharing secrets.

Standard connectors

Ready-made integrations for CRM, HR, finance and work management tools.