Access to records
People and agents have defined roles and permissions. Access is limited to the records needed for that role, with further restrictions for sensitive information.
An agent’s daily brief must respect those permissions. Information should not become visible simply because an agent can summarise it.
Agent permissions
Record which tasks an agent may perform automatically and where a person must approve the work. Client-facing actions require a person’s approval.
The business sets spending limits and can pause agents. Changes to permissions need an identifiable owner.
Activity records
Keep the source information, proposed action, approval and result with the relevant business record. Identify the agent and the people involved so the team can trace what happened.
If an action fails or its outcome is uncertain, it needs checking before it is repeated. The record must distinguish a draft, an approved action and a completed result.
Continuity
Routine calculations and essential reminders use fixed rules. These are designed to continue if AI usage is capped or a model provider is unavailable.
Backup restoration, monitoring and recovery procedures form part of the checks required before live use.
Implementation checks
Confirm the access model, data transfer, backup arrangements and available testing evidence for the agreed scope. Sensitive industry records may require additional controls and checks.
Ask for the current evidence before deciding which live records to move into the system.
Common questions
Can agents send messages without approval?
The intended control is that a person approves anything that reaches a client. Other routine tasks can operate within the permissions agreed by the business.
Can we see what an agent has done?
The design records agent actions, approvals and resulting changes against the relevant business record, with the people and agents involved identified.
Are the security checks complete?
The first release is still in development. This page describes the required controls and checks, rather than evidence that every check has already been completed.