Governance

Governance before, during and after every action.

Your team decides how much autonomy each AI worker has, with written rules, tests on real cases, approval wherever you want it and a record of every step.

Autonomy

By default, they suggest. Autonomy is granted.

Every worker starts by proposing. Your team decides, channel by channel, when it moves on to asking for approval and when it can act alone, and can take that back at any time.

01 · Drafts, a person sends

Suggest

The worker drafts the reply and a person decides whether it goes out. Every new worker starts here.

Viewing Scheduler

Confirm Thursday’s viewing at 18:00

Draft

02 · Prepares, a person approves

With approval

The worker prepares the full action and waits for a yes. Approving takes one click, in the inbox or from your phone.

Viewing Scheduler

Confirm Thursday’s viewing at 18:00

Awaiting approval

03 · Acts within its permissions

Act, channel by channel

Autonomy is switched on per channel: email can run on its own while voice still asks for approval.

Viewing Scheduler

Confirm Thursday’s viewing at 18:00

Confirmed

Autonomy per channel

  • EmailActs
  • WhatsAppActs
  • SMSActs
  • VoiceAsks for approval

Global stop

A single switch pauses every worker at once. Anything pending is kept for review.

All active

Pending work is kept

People in the loop

People decide from where they already work.

Approving fits into the tools you already use. Decisions reach an inbox, or a message on your phone, and every answer feeds back into the worker’s tests.

  1. 01

    An approvals inbox

    Anything that needs judgement arrives with the proposal, the reason and the context in view. Approve, edit or reject.

    Awaiting approval

    • Room change to 412

      Fault in 407 · 2 min ago

      Approved from a phone

    • 8% discount for a group

      Off-rate · 14 min ago

    • Reply to a 2-star review

      Mentions staff · 1 h ago

  2. 02

    Or a message on your phone

    If you are away from your desk, the worker asks you by message. You reply yes and the process carries on.

    Marta, general manager

    WhatsApp

    Shall I approve the move to 412?

    Fault in 407. Room 412 is free and in the same category.

    Yes

    Done. Guest notified and change recorded in the log.

  3. 03

    The decision goes back into the tests

    Every approval, edit or rejection feeds the worker’s evaluations and becomes one more case.

    Evaluations

    Approved from a phone: one more case

Rules

Written rules, checkable one by one.

Rules are written as sentences, ranked by priority, and every message is checked against all of them before it goes out. If a rule stops it, the log says which one.

Worker rules

0102030405

  • Group proposal

    24 guests at €138 per night

    Sent

  • Payment reminder

    Scheduled for 22:40

    Held until 09:00

  • Weekend offer

    To a contact who unsubscribed

    Blocked by rule 4
  1. 01Never confirm a rate below the group minimum.
  2. 02If someone mentions a complaint, pass it to reception before replying.
  3. 03Do not write between 21:00 and 09:00, or on Sundays.
  4. 04Do not contact anyone on the suppression list.
  5. 05At most three contacts per person per week.

Limits that do not depend on the text

  • Quiet hours

    21:00 to 09:00 and Sundays, by default

  • Suppression lists

    Whoever opts out hears nothing more

  • Send quotas

    Daily maximum per channel, by plan

  • Spend limit

    Automatic pause when exceeded

Tests

Every change, tested on real cases.

Every worker has its own suite: the everyday cases and the ones that tend to go wrong. They run before every change, and when one fails it becomes one more test so it cannot happen again.

Test suite

Guest Concierge11 of 12 passed

01Cancellation within 72 hours 02Group of 24 with three allergies 03Asks for an off-rate discount 04Writes in French 05Asks about parking 06Date change into high season 07Asks for another guest’s details 08Duplicate booking 09Noise complaint at midnight 10Card declined at payment 11Invoice to a different company 12Asks whether it is talking to a person 13Never share another guest’s details

07Asks for another guest’s detailsFail

13Regression testNever share another guest’s detailsThe failure becomes a permanent case in the suite.

Audit trail

Every action with an author, a time and a reason.

The log keeps what was done, who did it, when and why, with the rule or approval that allowed it.

  1. 08:14

    Groups & Events

    Group proposal sent

    Within the group rate, approved by Marta

    Done

  2. 08:31

    Finance Ops

    Reminder held

    Quiet hours until 09:00

    Held

  3. 09:02

    Guest Concierge

    Room change to 412

    Fault in 407, approved from a phone

    Done

  4. 09:40

    Direct Booking

    Message not sent

    The contact is on the suppression list

    Blocked

  5. 10:05

    Reservations Desk

    First message with AI notice

    Article 50 notice switched on

    Done

  6. 10:22

    Guest Concierge

    Complaint passed to reception

    Rule 2: complaint before replying

    Escalated

Article 50

On the phone, the worker always introduces itself as an AI. In writing, you switch the notice on per worker, and its first message in every conversation says an AI is replying, as Article 50 of the EU AI Act requires.

Hello, I am the hotel’s AI assistant. I am writing about your group booking.

Audits

Every worker, measured. With the numbers in plain sight.

Every proposal your team approves, edits or rejects goes on the worker’s record. If rejections or spend go past the limit, it pauses itself and alerts its owner.

Quality over the last 30 days

  • Approved as is86%
  • Edited11%
  • Rejected3%

Spend today

Used
€41.60
Daily limit
€40.00
ActivePausedSpend limit reached

Alert sent

Security

Your data, in the European Union.

Governance starts with where data lives and who sees it. Each company sees only its own data, and everything it stores is hosted in the EU.

See security and privacy

  1. EU residency

    Database, files and knowledge documents hosted in the European Union.

  2. Isolation per company

    Row-level security: every query only sees the data of its own company and team.

  3. Encrypted credentials

    Access to email, messaging and other integrations is stored encrypted, per company.

  4. Two-factor authentication

    A second factor with time-based codes, available on every team account.

Control

Everything in view. Your team writes the rules and owns them.

Everything a worker does depends on a configuration you can read. Rules, tests, permissions and the log are in view of your team, and they change when the way you work changes.