# AI agent procurement & security questionnaire
Which Agent · v1 · 2026-10-20 · Send to the vendor or answer from their public docs. Note a source for every answer.

## A. Computer & isolation
1. Does each agent run on its own isolated computer/VM, or is the computer shared across agents or users?
2. Where is the computer hosted (region), and can we choose the region?
3. Is the agent's computer encrypted in transit and at rest?
4. Can the agent access a user's local machine? Is that off by default?
5. What happens to the computer's files and sessions when an agent is deleted?

## B. Credentials & payments
6. Does the model or harness ever see raw passwords, tokens or card numbers?
7. How are logins stored (vault, per-site sessions, OAuth)?
8. Are payments made with one-time or capped credentials?
9. Can we set per-transaction and monthly spending caps?
10. Which actions always need a human (password change, payments over X, deletions)?


---
Questions 11–40 (approvals, prompt injection, memory, audit, commercials, compliance) are in the Agent Selection Kit: https://which-agent.pages.dev/kit/