Security and trust

An agent starts with nothing.
You decide what it can reach.

When you create an agent you choose the knowledge it may read, the tools it may use and the agents it may hand work to. The rest of this page follows from that.

What an agent may reach

Every agent is limited from the moment you create it.

A support agent sees the refund policy and the product notes. It does not see the board pack.

  1. Starts with nothing No access by default
  2. Knowledge you allow Only the projects you pick
  3. Tools you tick Others are not on its list
  4. Agents you allow One pairing at a time
  5. A person approves The work you choose waits
  • Each agent gets its own login, and you can cancel one without affecting the others.
  • People sign in through an account they already have. Access to the platform controls is restricted.

Where a person stands

Two ways a person steps in.

Two separate mechanisms. One holds work an agent has produced. The other moves a live conversation to a colleague.

Approval of produced work

A draft reply, an invoice, a plan for the next agent. Work you mark for approval waits for a person, with the agent's reasoning beside it. Approve it, edit it, or send it back with a reason.

Live handoff to a colleague

When a customer asks for a person, the agent moves the conversation to a shared queue and says so. A colleague picks it up on the same channel, and can hand it back.

The record

What happened, in the order it happened.

Every run is recorded

The documents the agent read and the tools it used, in order, with what came back. Open last month's run and read it.

Every skill save is a version

See what changed, who wrote it, and put a known good version back.

Every decision is attributed

Who approved what, when, and the reason attached to anything sent back.

Data handling

Personal details and your own network.

Recognised personal details are replaced before a transcript is stored.

Conversations show what customers ask. Before a transcript is saved as knowledge, personal data is replaced with placeholders, so the shape of the conversation is kept without the person's details.

NamesEmail addressesPhone numbersCard numbers

Tools inside your network stay inside it.

Agents can use a database or internal tool without anything of yours being opened to the internet. One small piece runs inside your network and agents reach through it.

Where the AI runs

An agent's thinking can happen on your own computer.

With Ollama, an AI model runs on a computer inside your network. The agent sends its questions there instead of to an AI company.

On your computer.

The model itself, and what the agent asks it and what it answers while it works. One small piece in your network connects out to Monsel, so nothing is opened to the internet.

Still with Monsel.

Your documents in Studio, your agents' instructions and the run records. A few supporting steps can still use a hosted AI: guardrail checks, and rewording a chat reply before it is sent.

Open models vary in quality and in speed, which depends on your hardware. Try your job on one before you rely on it. This is on the Pro plan and above. How it works

Agents from the marketplace

An installed agent gets no more project access than you have.

Agents you install from other people run in your workspace under your limits. How the marketplace works

A ceiling set by you.

An installed agent can be given only the projects you hold yourself. It arrives paused, so you read it before it runs.

Plain facts before you install.

Every listing has a summary of what it does and what it can reach, written by Monsel and not by the seller. Listings that have not been certified carry a warning that Monsel has not verified them.

Working with other agents

Permission first. Access you can cancel.

An agent hands work to another only where you have allowed that pairing, inside your workspace and across company lines.

Logins you create

A partner's agents sign in with logins you create for them. Cancel one and the access stops from that moment.

An open standard

A published standard lets your agents work with a partner's, even on a different platform. How that works.

Recorded on both sides

When both agents run on Monsel, a call from one to the other appears in the run record at both ends: who asked, who answered, and on whose behalf.

Ownership

Your data, and where it lives.

Your knowledge, skills and run history are exportable.

Your documents, skills and the record of what agents did can be exported on request. If you change AI company, or leave, you do not start again from an empty page.

A separate copy of Monsel, on request.

An organisation can have a separate copy of Monsel. Tell us what your policy requires, including where data must be kept, and we will say what we can do.

What we do not claim yet

The honest state of things.

  • Monsel is in private beta with a small number of businesses. Parts of it still change week to week.
  • The AI can still make mistakes. That is why you choose which work waits for a person, and why every run is recorded.
  • We hold no third-party security certification. When we are audited, this page will name the audit and the date.
  • We have not commissioned an independent penetration test.
  • We publish no uptime figure, because we have not run long enough to have one worth publishing.
  • If a control matters to your decision and it is not written above, ask us at hello@monsel.ai.

Private beta

Hear when your workspace opens.

Monsel is in private beta with a small number of businesses. Leave an email and we will tell you when the next batch opens. 200 free credits come with your first sign-up.

We email you when your workspace opens, and at most a handful of times before that. Every email has an unsubscribe link. Privacy.

To talk first, ask us to set agents up for your business from a written proposal, or write to hello@monsel.ai.