Security
Money guardrails, built for autonomous agents
Clawr assumes agents will try things you didn't anticipate. Policy, approvals, and audit are not features bolted on — they're the core of how every transaction flows.
Least privilege by default
Agents only get the merchants, budgets, and scopes you grant. Nothing is implicit.
Human-in-the-loop
Spend above your threshold pauses for a human decision before any money moves.
Immutable audit
Every request, decision, and receipt is appended to a tamper-evident log you can export.
Card-level controls
Freeze, scope, and expire virtual cards instantly. Merchant-locked and one-time cards built in.
Encrypted everywhere
Data is encrypted in transit and at rest. Secrets are scoped and rotatable per environment.
Isolated environments
Sandbox and Live are fully separated, with distinct keys, data, and webhooks.
Enterprise-grade by design
The controls your security and finance teams expect, mapped to the way agents actually operate.
- SOC 2 Type II
- PCI DSS
- GDPR
- SSO / SAML
- SCIM
- Data residency