Trust, privacy, and compliance

Security, access control, and transparency reporting

In brief: Unless defines security safeguards, dashboard user roles and permissions, and transparency commitments. The available information does not specify a reporting format or schedule.

Security, access control, and transparency address different parts of responsible platform use. Security safeguards protect systems, integrations, and customer data; access controls govern what authenticated dashboard users can manage; transparency covers how customers are informed about data-related practices and policies.

Security safeguards

Unless describes security as measures that guard platform systems, integrations, and customer data. Its safeguards include controls for prompt injection, insecure outputs, plugin design, sensitive information, and third-party dependencies.

The glossary also describes limited agency, which requires user approval for new action categories, and limited reliance on LLMs, which limits critical decisions without human review. These measures form part of the platform’s security and compliance approach.

Access control

Dashboard access is assigned to authenticated users with defined roles and permissions. Those permissions determine whether users can manage content, Procedures, or analytics.

Unless also describes privilege control as a measure against prompt injection. The available information does not explain how to set roles, permissions, or privilege controls, so it does not support step-by-step configuration guidance.

Transparency and reporting

Unless states that it will keep customers informed about changes to processes for protecting data privacy and security, including practices and policies. Transparency is also defined as clear disclosure of how the Customer Agent makes decisions, personalizes, and uses data.

Accountability covers the audit trail left by each Customer Agent decision, a documented incident response plan, and controls for showing what the agent did and why. However, the available information does not specify a transparency report format, delivery schedule, or reporting workflow.

Together, these definitions describe the safeguards, permissions, and disclosure commitments involved. For details about a specific report or configuration process, the available information is not sufficient.