Security and control
Zero-8 is built around defined access, isolated account data, revocable connections, and explicit action boundaries. Argus receives the access required for the configured operating scope—not undefined authority over the business.
Connections
Connected systems use permissioned authorization — Google and Microsoft accounts connect through their own sign-in, never by sharing a password with Zero-8. Connection credentials are stored encrypted, and you can review and revoke supported connections from inside the product at any time.
Isolation
Zero-8 uses multi-tenant infrastructure with account-level data isolation enforced at the database layer. Data and operating context from one customer are not exposed to another customer's Argus experience.
Action authority
Argus may observe, recommend, draft, queue, or complete an action depending on the rule explicitly configured for your account. Consequential actions remain in review unless you authorize a defined automation boundary.
| State | Meaning | Your control |
|---|---|---|
| Observe | Read a permitted source and surface information | Connection can be revoked |
| Recommend | Suggest a next step | No external action taken |
| Draft | Prepare content or action | Held for review |
| Queue | Place action in an approval or scheduled state | You can edit, approve, or cancel |
| Complete | Execute within an explicitly approved rule | Logged with timestamp and outcome |
Assessment status
Zero-8 OS completed the Google-required CASA Tier 2 security assessment in July 2026 through TAC Security, an authorized assessor. The independent scan reported zero vulnerabilities, and the Letter of Validation was submitted to Google on July 17, 2026. Google's confirmation of the submission is pending and will be reflected here. CASA status is revalidated on an annual cycle.
Security contact
To report a security concern or ask about Zero-8’s data handling, contact eamon@zero-8.io. Include enough detail to identify the affected account or connection without sending passwords or other authentication secrets.