---
title: "Divide security responsibility"
description: "The shared responsibility model divides platform operations from agent control, data ownership, and decision authority between Duale AI and the customer."
lang: en
status: public-preview
lastUpdated: 2026-09-04
url: https://duale.ai/en/docs/security/shared-responsibility
---

## AI-generated summary

Divide security responsibility between Duale AI platform operations and customer controls across identity, data, model providers, tools, work limits, results, and evidence.

- Pairs each platform commitment with the customer control it enables for review.
- States that greater agent autonomy adds customer controls like narrowed grants and human review.
- Requires multi-factor authentication when a person issues or revokes an agent API token.
- Notes the platform supplies no per-action authorization or human review mechanism by default.

Summaries were generated by AI. Generative AI is experimental.

---

Duale AI operates the runtime. You own the agent, its data, and every decision the agent's output feeds. This page states which duties fall where, so a review meeting can start from a shared list.

Use it for planning. It does not vary your contract: the [legal documents](https://duale.ai/en/legal.md) state the commitments that bind Duale AI.

## Duale AI runs the infrastructure; you control access

Duale AI operates and patches the platform, resolves the tenant and agent from each credential, and enforces the policies and grants you set. You keep credentials secret, assign roles, and protect your network, workstations, and build pipeline.

Multi-factor authentication is required when a person issues or revokes an agent API token, or changes their own authentication factors or sessions. [Agents and access](https://duale.ai/en/docs/agents-and-access.md) states what each role can do and how token revocation takes effect.

## Each agent control has two sides

Each row pairs one platform control with the decision or configuration you retain.

| Area                  | Duale AI                                                                       | You                                                                                         |
| --------------------- | ------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------- |
| Identity and access   | Derives the tenant and agent from the credential and enforces your rules       | Keep tokens secret, assign roles, and author the policies and Library grants                |
| Data                  | Protects transport and the managed storage it operates                         | Choose what you send and protect your own process, network, and activity cache              |
| Model providers       | Calls only providers in your declared pool and ranks routes inside it          | Select provider contracts, retention, region, credentials, and the pool                     |
| Tools and actions     | Routes only tools in the agent manifest                                        | Define each tool, authorize each action, add human review, and make side effects retry-safe |
| Work limits           | Enforces your deadline and fixed ceilings on delegation and model interactions | Control admission, concurrency, and total spend                                             |
| Results               | Enforces the response shape you requested                                      | Apply domain rules and decide whether the business process accepts the result               |
| Evidence and recovery | Records part of the platform activity                                          | Record approvals and exceptions, and compensate or repair an unwanted external action       |

See [Data protection](https://duale.ai/en/docs/security/data-protection.md) for transport and storage, [Authoring tools](https://duale.ai/en/docs/sdk/tools.md) for delivery, and [Access and isolation](https://duale.ai/en/docs/libraries/access.md) for grants.

See [Plan the deployment](https://duale.ai/en/docs/model-routing/plan-deployment.md) for the model pool, [Secure integration](https://duale.ai/en/docs/security/secure-integration.md) for approval and recovery, and [Evidence and audit](https://duale.ai/en/docs/security/evidence-and-audit.md) for records.

Whatever the deployment shape, you must keep the workload inside the [documented scope and limits](https://duale.ai/en/docs/scope-and-limits.md). The platform supplies no per-action authorization or human review mechanism. If you build neither, the agent acts without them.

## More autonomy adds customer controls

Two agents in the same tenant can have different risk because one can read content you do not control, reach important data, or change something outside the platform. Use the [threat model](https://duale.ai/en/docs/security/threat-model.md) to test those three properties together. Narrow a grant, split the work, or put a deterministic check or human decision before an external action.

Return to [Security](https://duale.ai/en/docs/security.md) to place this responsibility split in the path of one task.

## Related content

- [Secure your use of the platform](https://duale.ai/en/docs/security.md)
- [Govern AI agents while they move to production](https://duale.ai/en/solutions/governance.md)
- [One runtime path for production agents by operating role](https://duale.ai/en/solutions.md)
- [Turn AI pilots into a production portfolio](https://duale.ai/en/solutions/business.md)
- [Runtime security and pricing for production agents](https://duale.ai/en/product.md)
- [Terms of use for AI agent orchestration](https://duale.ai/en/legal/cgu.md)

---

## Sitemap

See the full [Markdown sitemap](https://duale.ai/sitemap.md) for all pages.