How do I rotate an agent's API token?
Go to the agent detail page, click "Regenerate Token". The old token is immediately invalidated and a new one is issued. Update your agent configuration with the new token.
Can I use Vortalis with custom/internal APIs?
Yes. Use the Custom Service Builder to create an adapter for any REST API. Define the base URL, authentication method, and available actions.
What happens when the kill switch is activated?
All agent requests are immediately denied with a clear error response. No data flows through the proxy until the kill switch is deactivated. The event is recorded in the audit log.
How are tokens stored securely?
Token values are encrypted at rest using AES-256-GCM. Access to the token vault requires authentication and is logged. Tokens can be configured to auto-expire after a set period.
Can I export audit logs for compliance?
Yes. Export in JSON or CSV format from the Audit log page. Exports include hash chain verification data so you can prove log integrity to auditors.
Is Vortalis GDPR compliant?
Yes. Vortalis is designed for GDPR compliance with data minimisation (tokenisation), right to erasure support, audit trails, and data processing records. We are registered with the ICO (ZC093445).
How does multi-tenancy work?
Each organisation gets a tenant with its own agents, services, policies, and audit logs. Data is tenant-scoped on the admin authentication path. The multi-tenancy hardening programme (RFC P-E1) continues; see /product/security-architecture for the current outside-the-perimeter list.
What if I exceed my plan limits?
You will receive usage alerts at 80% and 95% of your limits. Once limits are reached, additional requests are queued (Starter/Professional) or rate-limited (Sandbox). Upgrade your plan at any time from the Billing page.