Identity and membership
Customer workspaces are invitation-only. Membership is managed by authorized customer administrators, and role design is agreed during implementation.
Security and governance
Automation should make accountability easier to see.
Coveniq’s operating model is designed around dedicated customer workspaces, scoped integrations, explicit decision rights and a traceable record of workflow execution.
Control areas
Security boundaries are defined with the workflow.
Detailed technical and contractual commitments are documented for the specific customer engagement and deployment scope.
Scoped credentials
Workflow service credentials are separated from user accounts and configured for the systems and actions required by the approved scope.
Tenant separation
Customer workflow configuration, credentials and operational records are maintained within the dedicated tenant context established for the engagement.
Integration boundaries
Each connector is documented with its permitted systems, record types and actions. Material write operations may be placed behind approval gates.
Decision traceability
Execution cases retain the trigger, source evidence, rule results, agent output, reviewer response and resulting actions needed for operational review.
Workflow version history
Production changes are released as identifiable versions so a run can be associated with the rules and instructions that governed it.
Operational monitoring
Administrators can review run state, failures, approvals and completed actions to identify service or process issues.
Human control points
Customers determine which actions can proceed automatically and which require review because of value, risk, policy or customer impact.
Shared responsibility
Controls depend on both platform configuration and customer governance.
Coveniq implements the agreed workflow boundaries; customers remain responsible for the legitimacy of source access, user authorization and business decisions made through the configured process.
Coveniq responsibilities
- Implement the agreed tenant, workflow and connector configuration
- Apply documented roles, approval points and action boundaries
- Maintain execution records and operational views included in scope
- Support controlled release and issue handling for the delivered workflow
Customer responsibilities
- Authorize source systems, data use and reviewers
- Maintain accurate user membership and role assignments
- Approve workflow policies, thresholds and production changes
- Review legal, regulatory and retention requirements applicable to its use
Security enquiries
Request deployment-specific information during the diagnostic.
Security architecture, integration methods, data handling and administrative requirements are reviewed as part of implementation planning. Contact security@coveniq.ai for security-related enquiries.