Trust
Security
What Sutro can reach, what it can do on its own, and what we never do with your data.
Only the tools you connect, with the scopes you choose. Each connection is listed in your workspace, and you can revoke it anytime.
To read documents and decide the next step, Sutro sends the relevant text to a model provider. That text goes only to the model providers on our subprocessor list.
Only the steps your rules allow. By default, sending email, posting payments, deleting anything, and changing records wait for a person.
You choose which steps need approval
You set limits on amounts, vendors, and customers
You can pause one workflow or all of them at once
Every run records what Sutro read, what it decided, what it changed, and who approved it, with the source documents attached. Export the log anytime.
We don’t train models on your data or your runs.
We don’t sell your data or use it for advertising.
Sutro only runs workflows you enable.
Our team doesn’t open your workspace unless you ask, or the law requires it.
Encrypted in transit with TLS 1.2 or higher
Encrypted at rest with AES-256
Role-based access in every workspace
SSO and SCIM on Enterprise
You choose how long run logs are kept, within your plan. When you delete a workspace, we delete its workflows, logs, and connections within 30 days. Copies in backups are removed as those backups expire.
We use a small number of vendors to run Sutro, such as cloud hosting, our model providers, and email delivery. The current list is part of our security overview.
Found something? Email security@usesutro.com. We’ll acknowledge your report within two business days.