Trust & control
Authority to act needs a brake and a record
A system that can send, pay and change records on your behalf must be held to rules. DutyCaptain has two: nothing consequential happens without your approval, and everything is written down.
The AI proposes; your rules decide
The AI never carries out an action itself. Every proposed step passes through rules you control, which allow it, ask you, or block it. While one step waits for you, the rest of the task carries on.
| Action | Approval | Why |
|---|---|---|
| Send an email or message | Always | It leaves your organisation |
| Make a payment or transfer | Always | Moves money; also asks you to sign in again |
| Delete or overwrite outside the task | Always | Hard or impossible to reverse |
| Submit a form or publish content | Always | Seen by others once done |
| Grant a new permission or install software | Always | Changes what is possible next |
| Look at your screen | Always | A picture can show far more than the task needs |
| Read, search, analyse, prepare a file | Never | Changes nothing outside the task |
No
Yes
Rules can also block an action outright. Every approval is recorded with who gave it, when, and exactly what it covered.
Everything is written down
Each step records what was done, by which route and which AI model, what it cost, how it was checked, and who approved it. Nothing is reconstructed after the fact.
Trace any result
Follow a figure in a report back through the check that confirmed it, the step that produced it, and the document or page it came from.
Nothing leaves your computer silently
When a document’s contents leave your computer, the event is recorded with the file and its size — so you can see exactly what crossed.
Passwords never reach the AI
Credentials for connected services are kept in a secure store and used only at the moment of the action. The AI sees a name, never a key.
Your computer, your rules
The companion program is a helper, not a second decision-maker. It holds no plan and no AI of its own; it carries out approved instructions within the permissions you gave, and nothing more.
- Access
- Only the folders and applications you name — never the whole computer
- Checked twice
- The cloud will not send an instruction without permission, and your computer checks it again
- Connection
- Outgoing only; no ports opened, nothing exposed to the internet
- Screen
- A separate permission, and your approval each time it is used
- Control
- Pause from the menu bar, or withdraw access instantly from the web
Built for content that cannot be trusted
Web pages, documents and emails are written by other people. DutyCaptain treats them as information to read, never as instructions to follow.
- Text on a page that tries to give orders cannot approve anything; at most it can cause a proposal, which your rules then judge.
- The goal of a task can only be changed by you, not by something the task read.
- Cloud work runs in isolated workspaces that are discarded after each task.
- A dropped connection can never cause an action to happen twice.
- Team roles, named approvers and single sign-on are coming for larger organisations.
Bring your security review
We will walk your team through the approval rules, the task history and where work runs before you commit to anything.