Security
Sands writes into the systems your business runs on. That is a responsibility, and the controls are simple to state.
Writes are gated
Sands never changes anything in your tools without an explicit confirm. Every write shows a preview first and is verified after it lands.
Tokens are encrypted
Provider credentials are stored encrypted and scoped per user. Sands connects to your tools with the access you granted, nothing wider.
Data isolation
Your projects, specs, and conversations are isolated per account, enforced at the database layer with row-level security.
Full audit trail
Every run streams its steps and stores them. What Sands read, what it created, and what you confirmed is inspectable after the fact.
SOC 2
Sands is built on SOC 2 certified infrastructure, and our own SOC 2 program is underway. Ask us for the current status before you buy; we will give you a straight answer.
Security questions or a review for procurement: contact us.