For operations & automation teams

Automate the work. Keep the perimeter.

A visual builder for privacy-preserving AI automations. Chain triggers, models and actions, with tokenization on every edge, human-in-the-loop where it matters, and a full audit log of every run.

claims-triage · v2.1 · deployedRunning
01Trigger
On new email
#claims-inbox
02Tokenize
Null vault
14 entities · 41 ms
03Inference
GPT-5.1 summarize
342 tokens · eu-fra
04Approval
Human review
conf 0.72 · Anna M.
Human-in-the-loop
05Dispatch
Route to Zendesk
ticket AE-883104
Run #18,284 · 412 ms · privacy layer on · 0 raw sensitive data egressevery step audited · replayable
01 · Private by default

Tokens through every edge.

Every connection between two steps carries Vault tokens, not raw sensitive data. A model in the middle of the chain never sees a cleartext name, and neither does the step after it.

02 · Human-in-the-loop

Confidence gates the robot.

Set a threshold per step. Low-confidence outputs route to a human review queue. Approvals and rejections are audited like any other step, no shadow decisions.

03 · Fully replayable

Every run, every step, logged.

Each workflow run is an immutable event stream, trigger, tokenizations, model calls, approvals, dispatches. Replay a run for an investigation, a regulator, or a post-mortem.

Templates

Start from a workflow someone already trusts.

24 pre-built workflows for regulated industries, claims triage, KYC red-flag review, contract renewal tracking, support ticket summarization. Each shipped with its privacy-schema, model allow-list, and approval gates wired in. Fork, tune, run.

Versioned & forkable
Every template has a changelog. Fork to your workspace, tune, track diff against upstream.
Privacy pre-wired
Tokenization, vault scope and model allow-list come with the template. You don't re-audit the basics.
Compliance-reviewed
Each template has been reviewed by our DPO team and maps to a documented regulatory scenario.
Template library · 24 workflowsInstantiating
Claims triage
INSURANCE · 1,247 runs today
5 steps
KYC red-flag review
FINANCIAL · 892 runs today
7 steps
Contract renewal tracker
LEGAL · 634 runs today
4 steps
Support ticket summarizer
SUPPORT · 521 runs today
3 steps
Invoice dispute resolver
FINANCE · 412 runs today
6 steps

Human-in-the-loop

The model drafts. The human decides.

Set a confidence threshold on any step. If the model's output falls below it, the workflow pauses and the item lands in a reviewer's queue, with the prompt, the tokenized context, and the model's alternatives. Approve, request more context, or reject. Every decision is audited.

Tunable per step
Different thresholds for different steps. A draft summary can auto-ship; a compliance decision needs a human.
Reviewer pools
Route to a role, a named person, or a rotation. SCIM group membership, SSO identity, all honored.
Expiry & fallback
If no human reviews within SLA, fall back to a declared alternative, reject, escalate, or hold.
Approval queue · Anna M.2 pending
Pending · 2h 14m left
Claim 2047 · Höfer · conf 0.72
GPT-5.1 summary flagged, unusual liability clause
Approved · by anna.mueller · 14:22
Claim 2046 · Schulz · conf 0.88
Routed to Zendesk · ticket AE-883101
Rejected · by pablo.vargas · 14:18
Claim 2045 · Weber · conf 0.68
Insufficient context · returned to adjuster queue

Triggers & actions

What fires. What runs.

Every connector becomes a trigger and an action. Chain them in any order, the privacy layer applies uniformly.

New email, ticket, row, message or file.
On event
Cron, interval, or a fixed timestamp.
On schedule
Trigger from your own code, HTTPS webhook.
On API call
GPT, Claude, Mistral, self-hosted. Allow-list enforced.
Run a model
Vault-scoped sensitive data tokenization at any step.
Tokenize
Write to Slack, Zendesk, Salesforce, or any connector.
Dispatch
Run provenance

An audit your regulator will recognize.

Every workflow run is a structured OpenTelemetry event stream. Export a time-bounded slice for an investigation, a regulator, or an internal drill, with tokens in place of names, every step of the way.

Audit
Immutable · per run
7-year retention
Replay
Stepwise, deterministic
Sealed-vault sandbox
Identity
SAML / SCIM inherited
Role claims honored
Egress
Per-step region pinning
EU-only by default

Your runbook, automated. Your data, where it belongs.

Pick a template, wire your connectors, set your thresholds. Null handles the tokenization, the audit, the handoffs. You handle the work that actually matters.