Data & security

Client-controlled systems

Where practical, production systems are deployed in accounts and infrastructure controlled by the client, with named owners and documented access.

Least-privilege access

Agents and automations should receive only the permissions required for their defined job. Sensitive actions can be held for human approval.

Business context

Only approved data sources, policies, examples, and records should be connected to a workflow. Access depends on the client’s tools, permissions, and security requirements.

Visibility

Production workflows are designed with logs, status, exceptions, and recoverable documentation so teams can inspect what happened.

Model and vendor choices

Model, hosting, and infrastructure choices are selected for the workflow and agreed requirements. Data-handling terms differ by provider and deployment.