Governance
Security-minded overview of access control, credential rotation, retention, and what to document for enterprise reviews.
Governance is how you keep FlexyAgents aligned with SOC-style questionnaires: who can change prompts, who sees PII-heavy transcripts, and how long data persists.
Specific controls may be plan-gated—validate against your subscription and DPAs.
For step-by-step provider keys (OpenAI, Anthropic, Google Gemini, etc.), see Documentation → Governance → LLM API keys (BYOK).
Separate knowledge editors, people who manage billing and subscriptions, and people who can view transcripts. Break-glass procedures should disable risky automations without deleting historical audit data when policy allows.
Review membership quarterly, especially for contractors.
Server-side keys must never ship to browsers. Rotate on schedule and after employee departures.
Document which agents use BYOK endpoints for incident response drills.
Chat/embed API keys identify your app to FlexyAgents; LLM provider keys in Settings → LLM API Keys are sent to OpenAI, Anthropic, Google, or other vendors you enable—under your contract with them.
Align retention with customer contracts and GDPR/CCPA expectations. Know how to export or delete records for DSARs before you need it in production.
Redact or minimize PII sent to third-party LLM providers per your agreements.
Continue exploring
Platform features · HTTP API & webhooks · Quickstart · Contact
Build on your stack
Start a trial or talk to us about rollout, governance, and enterprise requirements.