Your data & AI
An AI agent should never see more than its task requires. That is a matter of design, not blind trust — and it is exactly our trade, born of identity and access management (IAM/PAM).
Four data levels
Every piece of information entrusted to an agent is classified before deployment:
| Level | Examples | Rule for the agent |
|---|---|---|
| 1. Public | Hours, services offered, FAQs, information from your website | Open access: the agent's normal working base. |
| 2. Internal | Internal procedures, document templates, operating rules | Reserved for the "employee" role; never served to the public. |
| 3. Personal | Name, contact details, a client's or employee's file | Out of scope by default: the agent escalates to a human instead of handling it. |
| 4. Sensitive or regulated | Financial or health data, trade secrets, negotiated rates | Never exposed to the agent without a specific assessment, a suitable model (often local), and explicit approval. |
Five guardrails, always
Least-privilege role access
Each agent has its own identity and only opens documents within its role. A document not authorized for the role is never served — even if asked for directly.
Minimization
The agent asks for and processes only the information its specific task needs. Nothing extra is collected "just in case."
Logging
Every answer, refusal, and escalation is logged with its source. You can check afterwards what the agent said and why.
Out-of-scope refusal
If the information is not in the authorized documents, the agent refuses and directs the person to a human. It never invents a price, a deadline, or a policy.
Human validation
A draft is never a send. Every sensitive action — sending, committing, a personal file — goes through a human's decision.
Local or online?
Depending on your data's sensitivity, an AI model can run locally, on a computer at your business, without your information ever leaving your premises; or online, for uses where only public information is processed. The assessment settles this question with you, based on real figures and constraints — it is never a default choice.