Security

An Agent You Can TrustWith Your Whole App

Most AI agents are held back by a prompt that asks the model to behave. AssistJet limits an agent the way your app limits a user. Grants and route gates are enforced in code, and you approve every step that cannot be undone.

Start Free Read the Docs

Two Gates on Every Call

A tool runs only when the seat has a grant for it and the caller passes the route's gate. Both are enforced in code before the call runs, so no model can talk its way past them.

People Approve the Final Steps

A call that cannot be undone comes to you first. The approval covers that one exact call, and the call runs once.

Access Changes Come to You

A change to any seat's grant always comes to you, so an agent can never widen the access it runs with.

Visitors Reach Public Routes

The customer seat has no built-in tools. A signed-in visitor can reach only what that visitor could already reach in your app, and an anonymous visitor can reach only public routes.

Budgets on Every Run

Each run has a limit on calls and writes. Writes made by a triggered run fire no further triggers, so a chain cannot grow, and you can set a monthly cost cap on any automation.

A Complete Record

Every message, tool call, model, token count, and cost is stored in the thread. Your exports and backups include all of it.

Stored in Your App's Database

Threads are stored in your app's database, on your account. There is no separate store to secure or export from.

Signed Reply Addresses

Every email has a signed reply address, so each reply is added to the right thread. A message from an unknown sender is kept as an unverified note.

Frequently Asked Questions

Where are my conversations stored?

In your app's own database on Substrio. They count toward that app's usage, and a backup of the app includes them.

Can the agent do something I did not allow?

No. A tool runs only when the seat has a grant for it and the caller passes the route's gate. Both are enforced in code before the call runs.

Can a visitor talk the agent into more access?

No. The customer seat runs with that visitor’s access, and a change to any grant always comes to you.

Can I see everything the agent did?

Yes. Every message and tool call is stored in the thread, with the model, the tokens, the cost, and the outcome.

Which account do I sign up with?

Your Substrio account. One sign-in covers AssistJet and every other Substrio app.

Is there a separate AssistJet dashboard?

Yes. Your team works in the AssistJet dashboard at assistjet.net/app. Plans and billing are in your Substrio account.