Security
Security and your data
Our agent only reads your systems. Anything we build or change in them is agreed in writing first, and your IT can cut off our access in minutes.
Our agent only reads
Our AI agent, which finds the repetitive work, never creates, changes or deletes anything in your systems, and never sends email from your accounts.
Our AI agent sends only read requests. Where a product offers read-only access, as Microsoft 365 does, we ask for it. We found no read-only option in QuickBooks, so there our own software keeps the agent to reading. We tell you that in writing before you connect, along with what the access allows.
Changes you approve
Anything we build, change or install in your systems, such as an automation or work on your CRM or ERP, is agreed in writing first. Whoever runs each system approves our access on that product’s own approval screen. Where a product has none, they set up a limited user for us instead.
Your data isn’t kept on our laptops or yours. We never ask you to email us files: reports reach us through access your IT approves.
Only what you name
We read only the shared mailboxes you name, such as ar@ or orders@, not everyone’s email. We don’t open the attachments in them: we record only each attachment’s name, type and size, except scheduled reports your IT sends us on purpose.
We don’t ask for payroll, HR or bank logins.
Nothing before you sign
Our free walkthrough memo uses only what you show and tell us on site. We take no data, files or mailbox access until you’ve signed.
Before we connect, you sign our data policy. It says what we collect, how long we keep it and how fast we tell you if something goes wrong.
What the AI sees
Before any text goes to an AI model, our own systems automatically replace names, email addresses, phone numbers and invoice numbers with code names. Amounts and dates stay real.
The only AI service that gets your data is Anthropic’s business API, never a personal or consumer AI account. Before you connect, we name in writing every company we use that stores or handles your data, and we use no others.
Your data stays yours
At Kestrel, only the two founders see your data. We never show it to another client or use it for another client’s work, and we don’t keep benchmarks built from it after the engagement ends.
Our reports describe processes and teams, not named employees’ performance.
Your text
Hi Dana, invoice 20417 for $12,480 was due on October 3. Can you confirm the payment date?
Marcus Hale
marcus@example.com
(314) 555-0142
What the AI model sees
Hi Person 1, invoice Invoice 1 for $12,480 was due on October 3. Can you confirm the payment date?
Person 2
Email 1
Phone 1
- Person 1 Code name
- $12,480 Stays real
For your IT team
| What we read | Kind of access | Who enforces read-only |
|---|---|---|
| Shared mailboxes you name, in Microsoft 365 | Read-only. Your IT approves our app on Microsoft 365’s own approval screen. | Microsoft 365 |
| Systems that offer read-only access | Read-only. Your IT approves our access on the product’s own approval screen, or sets up a read-only user for us. | The product |
| Products with no read-only option, such as QuickBooks Online | Not read-only. Your IT approves our access on the product’s own approval screen. | Our software, not the product. We tell you in writing before you connect what the access allows. |
We log every request our agent makes to your systems. Your IT can ask for the log at any time and compare it with Microsoft’s own audit logs.
How to cut us off
Your IT can cut off our access in minutes, without calling us.
- In Microsoft 365, remove our app.
- In each other product, disconnect our app or turn off our user.
We show your IT how before we connect.
What we don’t have yet
We don’t have a SOC 2 report. If your company runs a vendor security review, tell us early and we’ll answer your questionnaire.