Token Vault Isolation
Third-party tokens stay inside Auth0. SecureDesk requests scoped delegated access only at execution time.
Secure enterprise agent with delegated actions, policy checks, and persistent trust records
Delegated AI actions,
without blind trust.
SecureDesk lets a real user operate through AI across Slack and Gmail while keeping credentials in Auth0 Token Vault, enforcing Auth0 FGA, requiring approval on risky steps, and recording every action in a persistent audit trail backed by Postgres.
Verified
Auth0 Token Vault for delegated provider tokensVerified
Auth0 FGA enforcement for every tool actionVerified
Persistent approvals and audit trail in Neon PostgresSecureDesk Control Plane
Token Vault + FGA + CIBA + Postgres
Live Slack + Gmail Runtime
Low Risk
Read Slack Channels
Direct execution through delegated access and FGA policy checks.
High Risk
Post to Slack or send Gmail
Approval gate, persistent review state, and audit event before execution.
Approval Boundaries
Reads can flow immediately. Writes pause for explicit user approval through CIBA / Guardian or the in-product review boundary.
Persistent Trust Trail
Every meaningful action and approval session is stored in Postgres with risk, status, timestamp, and execution context.