Newsroom
Eight questions your CISO will ask about computer-use agents, and the answers
Access, data, network, audit and control: the security questions that come up before a computer-use agent touches a production system.
November 10, 2026 · 2 min read
Every pilot we run reaches the same meeting. Operations wants to start. Then security asks a set of reasonable questions, and the project waits until they're answered.
We'd rather you had the answers before that meeting. These are the eight we hear most, with how H handles each one.
1. What access does the agent have?
It runs under a user-level account that you provision, with the same permissions you'd give a new team member and nothing more. No admin rights and no service-account shortcuts.
2. Can it change anything?
Not at first. Agents are read-only by default. Write actions are turned on step by step, only after you approve them, and usually after a sandbox phase.
3. How does it connect to our network?
Through an outbound-only connection from a sidecar in your environment. There are no inbound ports to open.
4. Where does our data go, and is it kept?
By default, we don't use your data to train our models. Some enterprise customers choose to allow it in their agreement. The platform runs in the US and the EU, and inference runs in the US. Data handling and retention are set out in your agreement.
5. What certifications do you hold?
SOC 2 Type II. The report is available under NDA through our trust center at trust.hcompany.ai.
6. How do we see what it did?
Every run is logged step by step, with what the agent saw and what it did. Your auditors can review the same trail your operators see.
7. Who decides when it hands work to a person?
You do. You set the thresholds: which items it can close and which always go to review. Judgment calls go to a reviewer with the work prepared.
8. How do we stop it?
You can pause any agent at any time, and revoke its account the way you'd revoke anyone's.
What we'd suggest
Bring security in at the start, not at the end. The pilots that move fastest are the ones where the CISO's team helped scope the sandbox.
This article describes H's standard enterprise deployment. Specific commitments depend on your configuration and are set out in your agreement.
