Every step an agent takes is on a timeline. Who, what, when, and findable.

What it read, what it wrote, in which system, at what time, and every question a person answered, with their name on it. Nothing is edited after the fact. Your data stays in your systems; we hold the process. This page is what your IT will ask for.

Get your agent

FINANCE · TIMELINE · WED 4 FEB{{ status }}

{{ r.t }}{{ r.who }} {{ r.did }} {{ r.obj }} {{ r.where }}{{ r.tag }}{{ r.meta }}

INVOICE 2026-0412 · BRATEX · FULL TRAILfound in 0.3 s

Export this trail · PDF

every desk has one · nothing is deleted · people’s decisions are on it too · kept for as long as you are a customer

WHAT THE TIMELINE ANSWERS

WHERE THINGS LIVE

Three places. Your data is only ever in the first.

Nothing about your business is copied into a database of ours. The agent reads a record, acts on it, writes the result back, and keeps only the log of having done so.

{{ p.k }}{{ p.where }}

ACCESS

The narrowest access that does the job. Written down, revocable in one click.

Read-only where reading is enough. One mailbox, not the domain. The bank is read, never paid from. Every connection names who granted it and when, and your IT can pull it without asking us.

CONNECTIONS · YOUR COMPANY7 connections · 0 admin rights

{{ c.sys }}{{ c.access }}Revoke{{ c.scope }}granted by {{ c.by }}

revoking a connection stops the jobs that use it, nothing else breaks · an agent never sees a key · it sees a door

KEYS

Pasted once. Encrypted on save. Never shown back, not even to the agent.

API keys and passwords are encrypted the moment you save them. The value is placed in your container only for the run that needs it. An agent calls a connection by name; the platform opens the door. The key itself never appears in a prompt, a log or a chat.

CONNECTION · XEROsaved 3 Feb · Anna K.

API KEY

••••••••••••••••••Replace

Encrypted at restTLS in transitnever in a promptnever in a log

THE MODELS

The model sees the page it is reading. It keeps nothing.

Where a job needs an agent, the document goes to Anthropic’s Claude models under a business agreement: no training on your data, and retention only as those terms allow. A job that runs as a script sends nothing to a model at all.

WHAT AN AGENT NEVER DOES

Seven things that never happen.

Everything else an agent does is written in a plan you approved and can read. These seven are in no plan we build, and the plan is the only thing an agent may act on.

⊘{{ n.t }}{{ n.d }}

FOR YOUR IT · THE SHORT VERSION

The facts, one line each.

Send this section to whoever signs off on vendors. The long version, with the data processing agreement, sub-processors and incident process, is one e-mail away.

Request the security pack · security@scytian.com

YOU CAN LEAVE

Your data was never here. The process leaves with you.

On the day you stop, you get every plan in plain language, every connection listed, and the full run log. Your container is deleted within 30 days and we confirm it in writing.

Bring your IT to the first call.

Thirty minutes, their questions first. The security pack and a sample run log arrive before the call, not after.