Zero-Knowledge Vault
Your passwords are encrypted on your device — our servers cannot read them. Unlock with Touch ID, autofill with anti-phishing domain matching, generate strong passwords. Available in the Chrome extension and web app.
Security Architecture
Container Isolation
Each agent runs inside two sealed containers that cannot see each other. One handles AI thinking, the other handles your tools. Architecturally impossible to cross boundaries.
Zero-Credential Architecture
Every container creates a unique identity in memory at boot. No stored keys, no shared secrets. Your API keys are injected at the network edge — invisible to the container.
4-Layer Skill Scanning
Every marketplace skill passes through four layers of defense: pattern scan, AI analysis, community flags, and human review.
4-Layer Encryption
Every file gets its own unique encryption key. Chat messages and audit logs are encrypted at the database level. Credentials are zero-knowledge. Four independent layers — no single point of failure.
By the Numbers
- Row-level security on all database tables
- Rate limiting across all edge functions
- 5 layers of tenant isolation
- 75 of 111 edge functions rate-limited
- 150 database tables with Row Level Security
- AES-256-GCM encryption standard
Security FAQ
How does Agent Magic protect my data?
AES-256-GCM encryption at rest, TLS 1.3 in transit, row-level security on all tables, zero-knowledge vault. All data in GDPR-compliant EU data centers.
Is Agent Magic GDPR compliant?
Yes. Operated by Christof Wallner (sole proprietor, Cyprus). Fully GDPR compliant. EU data centers. All data subject rights supported.
How does Agent Magic isolate tenants?
5-layer tenant isolation: row-level security on all database tables, container isolation per agent, zero-credential architecture, CSP strict-dynamic headers, and rate limiting across all edge functions.
Does Agent Magic train AI on my data?
No. Agent Magic never trains AI models on customer data. Sub-processors (Anthropic, OpenAI, Google) operate under strict DPAs prohibiting training on customer inputs.