Security
Your team can draft. Only you can move money.
Every bot gets the least access its job needs, nothing is used to train AI models, and everything is logged.
Least access
Bots read and draft. Sending email is off until you turn it on per bot, and money always waits for you.
Not used for training
Your email, invoices and contacts are only used to do your work, never to train models.
Everything logged
Every action and approval is in the activity log: who did what, and why.
| Bot | Read | Draft | Send / pay | Delete |
|---|---|---|---|---|
| Penny | Email, calendar | Replies | Only if you allow it | Never |
| Sage | Public web | Reports | Never | Never |
| Ledger | Invoices, payments | Reminders, credit notes | Reminders if you allow it; money never on its own | Never |
| Nudge | CRM, email threads | Follow-ups, quotes | Only if you allow it | Never |
| Dawn | Other bots' activity | The brief | Brief only, to you | Never |
- Connection tokens and keys are encrypted at rest (AES-256-GCM); everything travels over TLS.
- Two-step sign-in with an authenticator app; once it's on, it's required to approve money.
- Roles: owners, approvers, email-only approvers and viewers.
- Delete your workspace at any time; its history is purged after 30 days.
- Questions or a report: security@nightshiftai.ca