cosmobuild

Nothing moves without you.

We work inside your mailbox, your CRM and your files. Here is what we can reach there, and how you keep control of it.

Only what you connect

It reaches only the tools you connect, through each tool's own sign-in, so we never see your passwords. For each one you decide what it may do.

  • Disconnect a tool, and its access ends.
Each connected tool with what it may do: Outlook, Salesforce and Business Central act with approval, SharePoint read only, Xero off.

Changes approved first

An email sent, a record updated, a file saved: changes to your systems wait for a person on your team, who sees exactly what will change before it happens.

  • Decline it, and nothing changes.
  • Turn a job off, and what it was doing stops.
A change to an opportunity in Salesforce waiting for approval, shown field by field with its value now and after the change.

Hidden instructions caught

Emails, documents and web pages can hide instructions meant to steer it. What it reads is checked for them, and when one is found, the job stops there: nothing changes, and nothing reaches your team to approve.

  • The message is kept as evidence and marked as a threat, so you can see what was tried.
  • Genuine requests carry on as usual, and their changes still wait for your approval.
The record of the job that read the email: the hidden instruction found, the job stopped with nothing changed and nothing sent for approval, and the email kept as evidence, marked as a threat.
A supplier's email asking for new bank details, with an instruction hidden in it telling the system to change the account without approval.

Everything recorded

Each piece of work keeps a record: what started it, what it read, what it changed and who approved it. You can look back through it at any time.

The record of one run: what started it, what it read, what it drafted, who approved it and what it changed, with times.

You know who can reach it

On our side, only the people looking after your jobs work in your account. You see them by name, and you can remove any of them.

  • If we need to see what your team sees to help, we can only look, and each visit is recorded.
The customer's Team page: their own people with their roles, and the one person on our side who looks after their work, by name, with a button to remove them.

Deleted when you ask

Ask us, and we disconnect each of your tools and delete your documents, tables and the record of every job.

When a customer leaves: Outlook, Salesforce and Business Central disconnected; documents and tables, the record of each job and the team's sign-ins deleted.

Your own security review

Where your data is stored, which AI providers it reaches, or a questionnaire from your security team: tell us on the call, and we go through it with you before anything starts.

For any security related questions, write to security@cosmobuild.dev.

Questions

Is our data kept apart from other customers' data?

Yes. Every request is checked against the business it belongs to, so other customers can't reach your data.

Is our data encrypted?

It travels over encrypted connections, and the access you grant to your tools is stored encrypted. That access is never shown on any screen, ours included.

Do you train AI on our data?

No. We don't train any AI model on your data.

Which AI do you use?

Models from established AI providers, chosen for each part of the work. Exact work, such as prices and totals, is done by plain rules, not by a model. If your policies call for a particular provider, tell us on the call.

How long do you keep our data?

The details of each job are removed after a set time. Your documents and tables stay while you use the service, until you ask us to delete them.

Who on our team can approve?

The people you choose, and you can change that at any time.

Can we see who processes our data?

Yes. Ask us for the list of services that process your data on our behalf, and what each one receives.

Start with a free 30-minute call.

Tell us which job you would hand over first. We'll tell you whether it's a fit and what it would take.

A free 30-minute callYour details go to Calendly and to us, only to arrange the call. Privacy