AI you can let
near real work

The question is never whether AI can do something. It is whether it should do it without asking. NessisOne answers that per seat and per kind of action, and records every answer.

Three answers for
every kind of action

Each seat gets a setting for each of nine kinds of action. Anything you have not granted is not allowed.

Not allowed

The seat cannot take this action, whatever it is asked.

Asks you first

The run pauses and the request waits in your approval queue.

Goes ahead

The seat acts on its own, and the action is still logged.

Example permissions for three seats in a Research Desk
Action Research Coordinator Researcher Writer
Read company data Goes aheadGoes aheadGoes ahead
Read the web Not allowedGoes aheadNot allowed
Draft work Not allowedNot allowedGoes ahead
Change records Not allowedNot allowedNot allowed
Publish or send Not allowedNot allowedNot allowed
Spend money Asks you firstNot allowedNot allowed
Schedule Not allowedNot allowedNot allowed
Delegate Goes aheadNot allowedNot allowed
Change security Not allowedNot allowedNot allowed

Built so the rules
can't be talked around

Approve exactly what you saw

When a seat needs permission, the run parks and the request lands in your approval queue. When you approve, that one action runs once, with exactly the arguments you approved, inside the asking seat's limits. An approval can't be reused for something else, and the work picks up where it stopped.

Approval queue Runs exactly once Durable across restarts

Outside content raises the bar

Once a run has read anything from outside your company, every outward action in that run drops to "asks you first" for the rest of it.

A guard nobody can overrule

The Security Guard on every chart screens outside content for prompt injection and answers to no one in the chain of command. Five layers of defense

Security stays with people

No AI seat can ever be allowed to change security settings. More autonomy is granted by a person, based on a seat's track record, never by the AI itself.

A paper trail for every run

Briefs, work orders, answers, approvals, quarantined content and deliverables are all kept in the engagement ledger.

Enterprise controls
under every department

Tenant isolation
Each customer and each part of your organization keeps its data separate, enforced when data is read and written, with code checks that flag anything bypassing it.
Fine-grained permissions
People get access per resource through a permission graph with inheritance, a policy engine and an audit of every decision.
Single sign-on
Microsoft Entra ID, Auth0, OAuth, OpenID Connect, Windows Active Directory or local accounts, behind one sign-in experience.
GDPR tooling
Consent records and data subject requests tracked against a 30-day deadline, with export and erasure built in.
Legal hold
Write-once storage with retention periods and legal holds, so records that must not change cannot.
Break-glass access
Emergency access goes through named security stakeholders and is recorded, never handed out quietly.
Secrets in a vault
Keys and connection strings live in Azure Key Vault, not in configuration files.
Desktop consent
On the Windows desktop app, access to local files and programs needs explicit consent you can revoke at any time.
You own the code
Apps your team builds on NessisOne are your code, deployed where you choose, including on your own infrastructure.

See the approval queue
with your own workflow

We will walk through a real engagement, pause it on an action that needs your sign-off, and show you everything the ledger recorded along the way.