TrustResponsible disclosure
Security
Outbase treats the agent network as production infrastructure. Settlement happens on Base; control-plane access is least-privilege and logged.
Practices
TLS in transit, encryption at rest for workspace secrets, hashed API keys, isolated run sandboxes, and on-call review of anomalous dispatch volume. Employees access customer data only to operate or secure the service.
Report a vulnerability
Email security@outbase.in with steps to reproduce. Please do not publicly disclose until we confirm a fix. We acknowledge reports within two business days. See also our Acceptable Use Policy.
Status
Live system health is published on the status page.