AI governance built into the system.
AI governance at Precision isn't a policy binder. Sends are held for approval by default, each business's data is isolated and encrypted, and approvals stay on the record.
- Recipient
- Alex · Northstar Studio
- Prepared by
- Inbound leads agent
- Reviewer
- Jamie
Hi Alex,
Your handoff is ready for review. The draft brings together the discovery notes and the next steps we discussed.
What's built in
Each business's data is handled by rules written into the system. Only models on a list we review can be called. We rely on the gateway's published zero-retention listings; we don't yet hold a signed zero-retention agreement with each provider.
Held for approval by default: your team approves, edits or skips what agents prepare to send, and an owner sets any routine exceptions.
One approver: the person who runs the work, or the one a business rule names. Only that person can approve.
Isolated and encrypted per business, with each business's data kept apart and encrypted with keys unique to it.
Language models under zero-retention routing: Every request asks the gateway for zero data retention and refuses data collection. Gateway fallback is off; a failed request may go once to a second listed model, possibly a different provider.
A permanent record of every approval, which can't be edited or deleted through the Platform during its retention period, even by administrators.
Every model call recorded, showing which job made it, which model answered and what it cost.
Legal hold and controlled deletion: a legal hold stops deletion of anything it covers, and deletion runs as a preview by default.
If you leave
Your encryption keys are not destroyed until your owner has confirmed receipt of a readable export of your data. They are destroyed no sooner than a day after destruction is scheduled; encrypted copies then can't be read. Database backups expire within 30 days. A legal hold blocks key destruction until it's released.
Questions
How is client data protected?
Each business's data is isolated and encrypted with keys unique to it. Language models run only under zero-retention routing, with data collection refused on every request.
What can run without a person approving it?
Only what an owner or operator rule allows: acknowledgments, due-date confirmations and document filing. Money, new people and deletions are never auto-approved.
Is governance a separate service?
No. It's built into every Precision system from the start, so your pipeline, Agent OS (AOS) and agents run under the same controls. On Managed, our engineers set it up with your team and keep it current.
What happens if there's a security incident?
A written incident-response process covers detection, containment, recovery and notifying affected businesses. Our security page describes it alongside the other controls.
Can we show clients how their data is protected?
Yes. Our security page and security packet explain the controls, and your system keeps a permanent record of approvals and model calls.
Are you SOC 2 certified?
Not yet. Our controls and policies are designed against SOC 1 and SOC 2 criteria, and we'll publish audit status when it's complete.