All services

Service · 05 / 06

A person still approves

An agent that can act needs a limit, designed with the workflow rather than added afterwards. We write down which steps it may take alone, which steps wait for a named person, and how you can see what it did. This is not a certificate and it is not a separate security product. Access follows the accounts you already have. If a step is too consequential to automate, it stays manual, and the design says so.

Based in Glasgow, working with smaller businesses and growing teams across the UK. We start from the process you already run, and we will say if an agent is the wrong next step.

Book an audit

What’s included · 5

  • 01 A written list of actions the agent may take
  • 02 Approval on anything hard to undo
  • 03 An audit trail a person can read
  • 04 Access scoped to the workflow, not the whole company
  • 05 Documentation your own governance people can review

Who this is for

Any team about to let software take actions, and especially teams who already have someone responsible for data or security. We would rather that person is in the room at the start.

  • Firms handling customer or financial records who will not give an agent a blank token
  • Teams that turned an automation off because nobody could see what it had done
  • Operators who want a colleague to confirm a payment, a customer message, or a record change
  • Security or information-governance people asked to sign something off before it is built

What you get out of it

  • You can explain what the agent is allowed to do
  • High-stakes steps stay with a person
  • A record when something goes wrong
  • Fewer surprises for whoever looks after data

Common questions

Does every action need a person?
No. Low-stakes, reversible steps can run. The list of what waits for approval is written down with you. If we cannot tell those apart, the workflow is not ready.
Can our own security people review this?
Yes. Data flows, retention, and access are part of the design. We produce the notes those people need, and we would rather they see them early.
Is this a compliance certification?
No. We do not sell a badge. We design the authorisation, the audit trail, and the human stop into the workflow you are actually running.

Tell us the process

Describe the workflow and the tools it already lives in. We reply within one working day, including when an audit is not the right next step.