Skip to main content
Appy.ai recognizes that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.
See Appy’s SOC-2, GDPR, HIPAA, ISO-27001 compliance and more in the Appy.ai Trust Center

​
Ownership: one accountable owner per resource

Every agent, automation, and agent-created website carries the same three-part access list:
  • Owner — the one person accountable for it. Only the owner can decide who else is allowed to use or manage it.
  • Managers — people who can edit, configure, share, or delete it. This always includes the owner.
  • Users — people who can open or run it, without being able to change it.

​
Who can see something when it’s created

  • A new custom agent or business process starts visible only to the person who created it. They’re automatically its owner, and its only user and manager, until they choose to widen it.
  • A new website starts visible to your whole organization. Everyone signed in can open it, and its creator manages it (and owns it, if they’re a member of your org) — so a page built for your team doesn’t accidentally lock out the rest of it.
Nothing is public until someone with manage access decides to make it so.

​
Moving ownership and changing access

Only the owner can change who else has access. A manager who isn’t the owner can still edit the resource itself, just not reassign who’s allowed to see or manage it. If you ever get a message saying only the owner can make a change, that’s why.
Message @ appy.ai to ask to change access to something when you have the appropriate permissions.

​
Confirm before anything is destroyed

Nothing below happens on the first ask. Before any of these actions take effect, Violet tells you exactly what’s about to happen and waits for your approval: nothing is changed, deleted, or disabled until you say yes. A couple of guardrails sit underneath this:
  • An agent can never delete or archive itself or its core behaviors
  • Only Violet changes a database’s structure. Adding a new table, column, or link takes effect immediately, since there’s nothing to undo; renaming or deleting an existing one is what triggers the approval above — a custom agent or automated business process that needs either hands the request to her rather than making the change directly.
  • If a request mixes a safe database addition with a change to something that already exists, Violet holds the whole request for your approval together, rather than applying the safe part and asking about the rest.
  • If an unattended, automated run would need one of these approvals and there’s nobody present to ask, Appy refuses the action outright and leaves everything as it was, rather than guessing on your behalf.