Secure your data from autonomous AI agents.
Suprbox sits between your documents and any AI agent that wants to read them. Every request is identified, evaluated against your rules, and logged — before a single byte leaves the vault.
Our Approach
AI agents break in ways traditional software doesn't. And since agents are non-deterministic, the same input can pass one run and fail the next. Vulnerabilities surface in those gaps, and attackers exploit these edge cases. So fixing one doesn't mean you're protected from the next.
One request. Three checkpoints. A signed answer.
Every call your agent makes flows through the same gate — authenticated, evaluated against your rules, and logged before a single byte leaves the vault.
Seven layers, one secure box.
Scroll to lift the lid. Each tier is independently isolated, audited, and replaceable — a clear contract from the agent-facing API down to the durable substrate.
Core Architecture
Nine rule types. Every guardrail an agent needs.
Each rule type below is a primitive: a condition you match (sensitivity, content, time, rate, scope, lease) and an action you enforce (allow, throttle, require approval, enforce capability, deny). Stack them per vault to get exactly the policy you want.
Companies running real agents against real data.
Built like the thing your security team would have built.
No clever shortcuts. Standard, audited primitives, layered the way they should be.
Three tiers. No surprises.
- 1 vault, up to 100 documents
- 3 API keys
- All global rules
- 30-day audit retention
- Per-vault rules
- SSO
- Unlimited vaults & documents
- Unlimited API keys
- Per-vault rules & permissions
- 1 year audit retention
- SSO & SCIM
- Priority support
- Everything in Team
- Region pinning (US / EU / APAC)
- 7-year audit retention
- SOC 2 reports & DPA
- Dedicated support
- Self-hosted option
Your documents. Your rules.
Spin up a vault in two minutes. Audit your first agent request in three.