Safety is the architecture, not a setting.

Data minimisation

Raw mail bodies, attachments, passwords and unrestricted contact lists are excluded by default; approved metadata and field allow-lists are used.

Tenant protection

Organisation Workspace data, configuration, queues, audit events and keys remain tenant-bound with forced database row-level isolation.

Evidence and provenance

Every displayed pathway can show why it is present, what evidence supports it, how current it is, the source policy and its review state.

Human control

No automatic message, introduction, merge or sensitive approval. Relationship owners and administrators decide.

External review

External candidates remain staged until an authorised reviewer accepts, rejects, defers or approves a controlled merge.

AI controls

AI assistance is constrained by approved use cases, redaction, model profiles, prompt and schema versioning, output validation, monitoring, kill-switches and human oversight.

Auditability

Connector actions, reviewer decisions, route actions, exports and policy changes create auditable records.