Compliance
- by design.
AI agents are first-class citizens in your compliance perimeter. Every action - human or AI - goes through RBAC, policy-as-code, and audit trail. Your data never leaves your cloud.
SOC 2 Type II, HIPAA, GDPR, HDS, DORA - built into the platform, not bolted on. BYOK means your clusters, your keys, your data.
Qovery is SOC 2 Type II certified. Audit logs, RBAC, and policy enforcement satisfy auditor requirements out of the box.
Every deployment, configuration change, and AI agent action is logged with full attribution - who, what, when, from where.
Your workloads run in your cloud account. Qovery never accesses your data, secrets, or runtime. BYOK from day one.
AI agents are scoped by the same RBAC policies as human engineers. No backdoors, no elevated privileges.
Security that enables shipping.
The best security is security that doesn't slow down engineering. Qovery bakes compliance into the platform so your team ships fast and stays compliant.
BYOK - your cloud, your data
- Your workloads run in your cloud account (AWS, GCP, Azure)
- Qovery never accesses your data, secrets, or application runtime
- Encryption at rest and in transit by default
- Data residency controls - deploy in any region, stay compliant
AI agent governance
- AI agents scoped by the same RBAC as human engineers
- Every agent action attributed, auditable, and reversible
- Network isolation per agent environment (allowlists, DNS filtering)
- No elevated privileges - agents go through the same API as everyone else
Complete audit trail
- Every action logged: deploys, rollbacks, config changes, agent actions
- Full attribution: who did what, when, from which tool (UI, CLI, MCP)
- Export-ready for SOC 2, HIPAA, GDPR, and DORA audits
- Deployment approval workflows for production environments
Security teams that passed audits.
"The auditor asked for a deploy log, RBAC matrix, and data-residency proof. We exported all three in under ten minutes."
"When our CISO asked how we govern AI agent deploys, we showed him the same RBAC and audit trail we use for engineers. He signed off in 5 minutes."
"We needed HIPAA compliance without slowing down deployments. Qovery gave us both - audit trail, RBAC, encryption, all built in."
"Zero security incidents since migrating to Qovery. The combination of RBAC, deployment rules, and audit trail gives us confidence."
Qovery vs. manual compliance
Manual compliance doesn't scale. Especially when AI agents are deploying alongside your engineers.
Security that ships.
Compliance built into the platform, not bolted on. Your data never leaves your cloud. AI agents governed by the same rules as your team.