AI agent security and data handling

Your data stays in your tenant.

The agents and integrations we build run in your own Microsoft tenant, under identities with only the access their job needs. Anything that posts money or changes a system waits for a named person on your team, and every step is logged so your auditors can follow it.

Who may do what

What an agent does alone, and what waits.

We agree this matrix with your controller before building anything.

ActionAgent does it aloneAgent drafts, a person approvesPeople only
Read documents and ERP records

Read-only, and only what its role allows.

Draft a posting, reply or quote

Drafts sit in a safe state until approved.

Post a payment, invoice or journal

It moves money.

Change bank details or master data

A common fraud target. Agents can flag, never change.

Change the agent's own access

Only your admins can.

Controls

How we keep it safe.

Your tenant

Agents and data run in your Microsoft tenant. Microsoft states Azure OpenAI prompts aren't used to train its models.

Least privilege

Each agent gets its own identity with only the access its job needs, reviewed regularly.

Every step logged

What was read, what was drafted, who approved and when, kept for audit.

Untrusted input

Emails and PDFs are treated as data, never as instructions, to blunt prompt injection.

Stop and roll back

A tested way to switch an agent off and restore the last good version.

Read-only to start

Assessments use read-only access and install nothing.

FAQ

Security questions, answered.

Where does our data go when you build an AI agent?

It stays in your Microsoft tenant. The agents and integrations run there, and Microsoft states that Azure OpenAI prompts are not used to train its models.

What access do your agents get?

Each agent has its own identity with only the access its job needs, reviewed regularly. Assessments use read-only access and install nothing.

Can an AI agent move money on its own?

No. Payments, invoices and journals wait for a named person to approve them, and agents can flag but never change bank details or master data.

How do you protect agents from prompt injection?

Emails and PDFs are treated as data, never as instructions, and every agent has a tested way to be switched off and rolled back.

Questions from your security team?

We'll answer them in writing.

Book Appointment
Sahil kataria (1)
Sahil Kataria

Founder and CEO

amit Kumar
Amit Kumar

Chief Sales Officer

Talk To Sales

USA

+1 270-550-1166

flag

+1 270-550-1166

Phil J.
Phil J.Head of Engineering & Technology​
QServices Inc. undertakes every project with a high degree of professionalism. Their communication style is unmatched and they are always available to resolve issues or just discuss the project.​

Turn the Microsoft Licenses
You Already Own Into an
AI Workplace

Join our live webinar on Sept 24 and see five
ways to automate meetings, approvals, and

document search with  tools already in your

tenant.

Assured

Thank You

Your details has been submitted successfully. We will Contact you soon!