AI inside the operation demands trust.
How Prophet handles access to data, to integrations and to what the AI is allowed to do, before you connect your agency’s operation.
Each person sees what they should.
In a team workspace, the owner sees the whole operation. Each member works in their own conversations and automations, and client context is shared by everyone.
- The work belongs to the team. Whoever leaves the workspace loses access, and what they did stays with the agency.
- Money belongs to the owner. Plan, billing and credits can only be changed by the team owner.
- The agent follows the same rules. It only finds what the person who asked could open on screen.
Agência Norte
- Ana’s conversationsAnaSees
- Caio’s conversationsCaioSees
- Automations created by AnaAnaSees
- Caio’s campaignsCaioSees
- Client contextTeamSees
- Knowledge baseTeamSees
- Plan and billingOwnerSees
Illustrative simulation.
Passwords in a vault, never in the chat.
Keys and passwords are encrypted in a workspace vault. For apps, you sign in through each one’s official screen, and Prophet never sees your password.
- Secure field. When the agent needs a key, it opens a dedicated field for it. The conversation never stores the value.
- Masked if it shows up. If a key appears in a task’s output, it’s replaced with •••• before it reaches you or the AI.
- Only the owner changes keys. In a team, a member can add a new key but can’t change or delete existing ones.
Workspace secrets
Listed by name, never by value- used 2 hours ago
WHATSAPP_PHONE
WhatsApp alerts
- used yesterday
META_ADS_TOKEN
Friday report
- never used
CRM_API_KEY
Lead summary
# output of a task
GET /v1/campaigns?account=atlas&token=••••
200 OK · 14 campaigns
Each task in a separate environment.
The agent’s work runs on its own computer, created for that run. What one task does doesn’t leak into another account.
- Spending limit per automation. If a run goes over what’s expected, it stops and you decide whether to raise the limit.
- A history of every run. What ran, when, and the reason in words when something didn’t work.
- Stops when it gets stuck. A task that keeps repeating the same error is stopped instead of retrying.
Latest runs
Example- Today, 08:00
Check project deliverables
Completed · 1 min
- Yesterday, 08:00
Check project deliverables
Completed · 1 min
- Mon, 08:00
Check project deliverables
Stopped: Trello asked to reconnect
- Sun, 08:00
Operations summary
Stopped: went over the set spending limit
Sensitive actions wait for your click.
The agent handles the day to day. When an action can’t be undone, it shows what will happen and waits for you to confirm.
- Deleting asks for confirmation. The server only accepts a deletion after your click, in a later message. A sentence hidden in an email confirms nothing.
- Replies to leads become drafts. In campaigns with approval, the response waits for you before it goes out.
- Emails with unsubscribe. Prospecting goes out with a link to leave the list, and anyone who asked to leave gets nothing more.
Prophet agent
Sample operationBefore deleting, check what will be removed:
Folder “Briefings 2025” · Atlas Studio
12 files · used in 2 automations
Illustrative simulation; nothing is deleted here.
Your clients’ data does not train AI models.
Prophet uses Anthropic models, through AWS and through Anthropic’s own API, under commercial agreements that don’t use what you send to train models.
Encryption
Data protected in transit and stored encrypted.
You delete
You can delete conversations, memories, files and secrets at any time.
Memory under control
Turn off memory for the account or a conversation when you don’t want something remembered.
Security questions.
See all questionsWhere is the agency’s data stored?
On AWS infrastructure and in a managed, encrypted database. Files the agent creates during a task stay in that run’s environment.
Does Prophet follow standards like SOC 2 and ISO 27001?
Connections to your apps live in a SOC 2 and ISO 27001 certified environment, and the infrastructure runs on providers with the same certifications. Everything travels encrypted, and credentials are encrypted at rest. Need a security questionnaire? Talk to the team.
Can the AI send something without me seeing it?
Automations do what you described, at the times you set. Deleting data, replying to leads in campaigns with approval and other sensitive actions wait for your click.
How do I remove someone from the team?
The owner removes the person in Settings. Access ends immediately, and the work they did stays with the workspace.
Does Prophet store my apps’ passwords?
No. Connecting to Gmail, Drive, Trello and others happens through each app’s official screen. API keys you add are encrypted in the vault.
Is the agency’s data used to train AI models?
No. The data in your account and your clients’ data are not used to train AI models.
Put Prophet to work at your agency.
Prefer to talk first? Talk to our team