Tenant-scoped by design
Data and connections stay within the customer context they belong to.
Security & trust
The right automation is visible, bounded and recoverable. That principle shapes how Work Agents handles data and external actions.
Data and connections stay within the customer context they belong to.
Confirmed fields are protected and customer communications require explicit approval.
Important decisions, changes and external actions retain an audit history.
OAuth scopes follow the capabilities enabled for each connector.
Human-confirmed values are not silently overwritten.
External actions are intended to be validated and recoverable.
Privacy, residency and data egress are treated as product constraints.
Connection permissions are limited to enabled capabilities.