# Security & Data (/platform/security-and-data) A Trelium agent can only get into the software you connect it to, and only as far as you allow. Your records stay where they are today, in your own order system, accounting software, and inbox, and the agent works on them there. This page explains how that works day to day. Trelium's formal security policies and audit status live on the [Trelium security page](https://www.trelium.com/security) and the [Trust Center](https://trust.trelium.com), which are the places to send your IT or security team. ## Two kinds of security questions [#two-kinds-of-security-questions] Security questions usually fall into two groups, and the answers live in different places. | Question | Examples | Where to look | | --------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | | What does the agent actually do with my data? | What it can open, how its logins are kept, what gets recorded | This page and the pages it links to | | What has Trelium committed to, and what has been checked? | Audits and certifications, the other companies Trelium uses to run its service, how data is deleted, the documents a security review asks for | The [security page](https://www.trelium.com/security) and the [Trust Center](https://trust.trelium.com) | As of October 2026, Trelium's SOC 2 Type II audit is in progress. It is not a completed certification. Audit and certification status changes over time, so treat the [Trust Center](https://trust.trelium.com) as current. The Trust Center also states that data is encrypted at rest and in transit. Enterprise plans can place data in US or EU residency and can run Trelium on your own infrastructure; see the [enterprise](https://www.trelium.com/enterprise) and [on-premises](https://www.trelium.com/on-premise) pages. Do not read those options as "data never leaves its source system." ## What an agent can get into [#what-an-agent-can-get-into] An agent works only in the software connected for its job, and each connection sets the limit. There are two kinds of connection: * **A built-in connection** that the software offers for other tools to use (called an API). The agent can do only what that connection allows. See [Integrations](/concepts/integrations). * **Its own login.** Where there is no built-in connection, the agent logs in and uses the same screens your team does, with a user account you create for it. It can see and do only what that account can, and its work stays separate from your team's. See [Browser Agents](/concepts/browser-agents). Because you decide what each connection or login can reach, you can give an agent only what its job needs. An agent that enters purchase orders needs your orders inbox and your order system. It has no reason to reach your payroll software, so you don't connect it. [Connecting Systems](/concepts/connecting-systems) explains each way of connecting and what your team does for it. ## How your team signs in [#how-your-team-signs-in] Trelium supports single sign-on (SSO). Your team signs in to Trelium with the same work login they use for other company tools, managed by your IT team, instead of a separate Trelium password. Enterprise and on-premises setups commonly use SAML with providers such as Okta, Google Workspace, or Microsoft Entra. Ask the Trelium team to set it up for your company. ## Where your data stays [#where-your-data-stays] Trelium does not move your records into a new system. Your order system, accounting software, and inbox stay the official home for your data. When an agent needs a record, it looks it up at that moment, does its work, and puts the result back in the same place, such as a draft order in your order system. See [What is Trelium?](/what-is-trelium) and [How Trelium Works](/how-trelium-works). ## Where a person stays in charge [#where-a-person-stays-in-charge] Connecting your software does not mean the agent decides everything on its own. Each agent's workflow sets which steps need a person's approval and which cases stop and go to a person, such as a price that doesn't match what was agreed. See [Human in the Loop](/concepts/human-in-the-loop) and [Validation & Exceptions](/concepts/validation-and-exceptions). ## What is recorded [#what-is-recorded] Every agent keeps an Activity log of its work: each job it handled, the steps it took, which apps it used, when each step happened, and how the job ended. [Logs & Audit Trails](/concepts/logs-and-audit-trails) explains how to use the log to check a piece of work, and what it does not cover. ## Trelium's data commitments [#treliums-data-commitments] Trelium publishes its commitments about your data on its [security page](https://www.trelium.com/security). As of October 2026, that page says: * **Your data is not used to train AI.** Nothing that goes through Trelium, including orders, customer records, and emails, is used to train or improve any AI model, by Trelium or anyone else. * **Your data is kept apart from other customers'.** Each customer's agents run in their own separate space. Nothing is shared between customers, including where data is stored and where it is processed. * **Trelium keeps only what your agents need.** Your data is handled on your behalf and not kept longer than your agents need it. If your contract ends, it is deleted on a set schedule. * **People see only what their role allows.** Each person on your team can see and do only what their role in Trelium permits. If anything here differs from the security page, the security page is correct. Trelium can also run on your company's own servers or private cloud instead of Trelium's, as described on the [on-premises page](https://www.trelium.com/on-premise). Send your IT or security team to the [Trust Center](https://trust.trelium.com) for current audit status. The [security page](https://www.trelium.com/security) has the documents a security review usually asks for, the list of other companies Trelium uses to run its service, and a way to book a walkthrough with the Trelium team. ## Where to go next [#where-to-go-next] How an agent logs in to software that has no built-in connection. What the Activity log records for each job. The ways your software can be connected. Where people approve and review an agent's work.