There is no such white paper. What I can say is that we have made extensive penetration (security) tests of the Aurena Agent, and it's deemed to be secure.

IFS can never promise that it's 100% safe to use or that it does not have any bugs, we can just say that we have tested it extensively. It's the customer that has the responsibility to decide if they want to use it or not though.

The main security mechanism is that the Aurena Agent will only "obey" commands from certain hosts (which you define when you run the installer). This is to make sure that an attacker doesn't use it to execute actions on a user's PC when they are surfing the web. As for what it can do, it's an inherently powerful part of our software as it can do things on/with the user's PC that's normally not possible with current web technology.