BoldAgent by Syncfusion has launched

Book a demo Free trial

Legal Center

Policies, agreements, and how we protect your data

Everything that governs how you use BoldAgent: the terms you agree to, how we handle personal data, the security programs we are audited against, and how we use AI responsibly.

Browse documents Security and compliance

Documents

Find the Policy You Need

Pick a document from the list, or search by name.

Security and compliance

Independently Audited and Certified

BoldAgent is reviewed against recognized security and privacy frameworks. Ask our team for the reports your security review needs.

  • AICPA framework SOC 2 Type II Independent auditor tests our security controls over time. Audited
  • U.S. healthcare law HIPAA Independent AICPA-accredited audit report. Report available
  • EU regulation GDPR Meets EU requirements for handling personal data. Compliant
  • U.S. federal standard NIST 800-53 Federal framework for security and privacy controls. Aligned
  • Texas DIR program TX-RAMP Level 2 Cloud security program for Texas state agencies. Certified
Need an audit report, DPA, or security questionnaire for your review? Request compliance documents

Built into the platform

How BoldAgent protects every agent

Responsible AI on every request

Policies detect prompt injection, data leakage, and exposed credentials, API keys, and tokens in requests and responses.

Agents use only the tools you enable

Tools are switched on per agent, and API keys carry only the permissions of the user who created them.

Isolated code execution

Code runs in short-lived sandboxes isolated per run. Files and packages are discarded when the run ends.

People approve real actions

Human approval pauses a conversation so a reviewer can approve, edit, or reject an action before it runs.

Every change is recorded

Audit logs capture configuration and access changes, filterable by module, activity, user, and date.

Trace what happened in a run

Trace logging records model inputs, outputs, tool schemas, and tool responses, group by group.

Responsible disclosure

Found a security issue? Tell us.

We welcome reports from security researchers. Read the disclosure policy for scope and how to report, and please give us time to fix an issue before sharing it publicly.

Read the policy Contact security team

Frequently Asked Questions

Both are listed under Documents. Filter by Agreements and terms or Privacy and data, or search by name.

SOC 2 Type II, a HIPAA audit report by an independent AICPA-accredited firm, GDPR compliance, NIST 800-53, and TX-RAMP Level 2 certification.

Yes. Use Request compliance documents to contact our team with what your review needs.

The Data Processing Addendum is listed under Agreements and terms. Contact us if your organization needs it countersigned.

The Sub-processors document lists the third parties that help us deliver the service.

Follow the Responsible Disclosure policy, or contact our security team through the Contact Us page.

Questions About Our Policies?

Our team can walk you through any document, certification, or security review.

Contact us Browse documents