Explicit identities
Mobile users, customer backends, operators and deployments use separate credentials and scopes.
SECURITY BY BOUNDARY
Every identity, deployment and data path has a scope.
iSleep separates customer business data, cloud configuration and model services so each component receives only the access it needs.
Tenant + App scopeShort-lived tokensAudit correlationEncrypted secrets
01Sensor
02Apps
03Data plane
04API
05Agents
01 — Controls that follow the architecture
Private deployment
Self-Hosted keeps customer sleep records in the customer data plane and uses narrow outbound service calls.
Agent constraints
The website Agent reads reviewed public knowledge only; customer MCP tools remain separately authorized.
Verifiable operations
Health checks, signed entitlements, correlation IDs and deletion audit records support investigation.
Security claims are backed by system boundaries and operational evidence.
START WITH EVIDENCE