Workspace boundaries
Verified sessions and workspace membership govern protected operations. Agency access uses explicit client-issued grants.
Understand how workspace access, reviewed actions, and retained evidence shape Avelon’s operating model.
01 / Product controls
Verified sessions and workspace membership govern protected operations. Agency access uses explicit client-issued grants.
Consequential work retains its reviewed content, destination, authority, and allowance. An enabled agent does not create unlimited permission.
Workspace provider credentials are stored through encrypted connection services. The deployed encryption keys and infrastructure need appropriate operator management.
An ambiguous provider response stays unresolved until its existing action can be reconciled. It is not treated as permission to send again.
02 / Assurance
These descriptions cover implemented product controls. They do not establish an independent security audit, certification, penetration-test result, uptime guarantee, or qualification of every hosted deployment.
No SOC 2 or ISO certification is claimed on this page. Contact us for the current evidence applicable to the environment you plan to use.
Read the privacy draft03 / Report a concern
Send a security concern to support@joinavelon.com. Include the affected URL, reproduction steps, and potential impact. Avoid sending credentials or private customer records.
A response-time guarantee and bounty program have not been announced.
The next move is yours