Trust

Security Architecture

Data governance is part of the product, not an add-on. Agent Effects is designed so autonomous action stays inside licensed boundaries and customer data stays inside contracted systems.

Controls

Encryption in transit (TLS) and at rest. Least-privilege credentials to customer CRMs, phone, and calendar APIs. Environment isolation per customer. Audit traces for inbound events, tool calls, and outbound messages. Human escalation for high-stakes triggers.

Model use

Customer operational data, client records, and communications are not used to train public foundation models. Model providers, when used, are treated as subprocessors under contract.

Compliance posture

We handle personal data in line with UK GDPR: purpose limitation, access control, a listed subprocessor set, and data-processing terms available on request. Contact [email protected] for a security questionnaire or DPA.