Security

Automation you can switch off in one click.

No certifications are claimed here. What follows is exactly how access, approvals, logging, and data handling work in practice.

What access the agent needs

  • Access is limited to what one agreed workflow requires — typically a mailbox or shared folder where the documents arrive, and read access to the records used for checking.
  • Write access is only requested where the workflow genuinely needs it, for example filing a document or updating a record. [CONFIRM: the exact systems and permission levels you request for a standard engagement.]
  • Credentials are never shared between clients.

Human approval rules

  • Nothing is sent to a customer or supplier without a person approving it.
  • Low-confidence extractions and anything outside the agreed rules are held and routed to a named person.
  • You define which actions the agent may complete on its own and which always wait for approval, before the pilot starts.

Action logs

  • Every action the agent takes is recorded: what document it processed, what it extracted, what it compared, what it decided, and what it sent for approval.
  • Logs are available to you so any outcome can be traced and corrected. [CONFIRM: where logs are stored and how you give the client access to them.]

Revoking access anytime

  • You can remove the agent's access at any moment, without notice or explanation, from your own systems.
  • Removing access stops processing immediately; nothing depends on my cooperation to take effect.

NDA

  • An NDA is available on request and can be signed before the discovery call, so you can talk about real documents and real numbers from the start.
  • [CONFIRM: whether you use your own NDA template or sign the client's.]

Data retention and deletion

  • Documents and extracted data are kept only as long as the workflow requires. [CONFIRM: your standard retention period, for example 30 or 90 days.]
  • On request, or when an engagement ends, working copies of your documents and data are deleted. [CONFIRM: your deletion turnaround time and whether you provide written confirmation.]
  • [CONFIRM: where data is processed and stored geographically, and which sub-processors or AI providers are involved.]

Start with one workflow

Bring one document your team handles every day.

In a free 30-minute call, we’ll tell you honestly whether an operations agent is a good fit.

Book a free call