Trust and data
What the agent may read, what it may do, and where it stops.
Plain language, and no claims we cannot evidence. If something on this page matters to your procurement process, ask us for it in writing — that is the point of publishing it.
Operating controls
How every deployment is governed.
Data access
Agents read from knowledge you approve and from systems you connect. Retrieval respects the permissions already in place for the user or the service account in scope. We inherit access boundaries; we do not widen them.
Authorized actions
Every action an agent can take is allowlisted per deployment — for example, book an appointment, create a ticket, update a named CRM field. Anything outside the list requires a person.
Human handover
Uncertainty, restricted actions and out-of-scope requests trigger a handover with conversation context. The handover is a designed part of the workflow, not an error path.
Approval before consequence
External messages and consequential system updates wait for human approval unless a specific action has been explicitly authorized in the deployment scope.
Separation of demo and production
Public demonstrations use synthetic data on separate sessions. They cannot reach client tenants, client knowledge or production records.
Records and review
Interactions are recorded with what the agent did and why, so outcomes can be reviewed for quality rather than only counted.
What we will not claim
The honest gaps.
Most AI vendor trust pages imply more coverage than they hold. Here is what we deliberately do not assert on a web page.
Certifications
We do not display certification logos on this page. When a certification covers the specific entity and product you are buying, we will name the certification, the scope and the entity — and give you the report.
Data residency
Processing region is chosen per deployment and confirmed in writing during scoping. We will not make a blanket residency claim on a marketing page.
Subprocessors and model providers
The model and infrastructure providers used in your deployment are disclosed during scoping and named in the agreement.
This website's forms
Form submissions are validated server-side. Your free-text answers are not forwarded to general analytics tools. We record only the events needed to measure the funnel.
Need the technical detail?
We will run a technical discussion with the people who operate the platform, not a sales call with a security slide.