Not a promise about intentions — an arrangement. Your data is stored separately from every other customer’s, we hold no passwords at all, and nobody here can look inside your workspace unless you switch that access on.
Not intentions or a roadmap — this is how the service runs for every customer today.
Your production lead sees recipes and materials. Your salespeople see customers and prices. Whether cost and margin appear at all is your decision, by role and by seniority, set in a couple of clicks. And it is real: a figure somebody is not meant to see is genuinely not in what their screen receives.
See the plansThe assistant is off until you switch it on, per workspace. When you do, it acts inside the permissions of whoever issued its token — nothing wider — and every write it makes carries that name in the change journal with the previous value behind it.
Revoke the token and it stops on the next call. On Scale, writes can be held in an approval queue first, so an agent proposes and a person decides.