Minimum access
Only connect to the systems and information required for the agreed solution.

SECURITY PRINCIPLES
Connecting business systems and using AI introduces risks — including unauthorised access, data exposure and automation or AI making mistakes. We design around these risks from the outset.
Only connect to the systems and information required for the agreed solution.
Use established platforms such as Microsoft, OpenAI, Make and monday.com with recognised security practices.
Only pass or store the information needed to perform a specific task.
AI can identify and organise work, but consequential actions aren't automated without appropriate safeguards and approval.
For example: AI might identify a customer request and create an internal task automatically, but a person would approve a customer email before it's sent.
We agree what Orsym can access and do upfront. Connections can be revoked, automations stopped, and sensitive access is covered by confidentiality agreements.
SIMPLE PRINCIPLE