Trust

Consent. Cap. Record.

What holds, and where the preview stands.

Consent before a word

The other party opens a private link, confirms four acknowledgements, and types the invited email. Their consent is their own. OwnEnvoy shows the link. The owner shares it.

A disclosed envoy

The agent’s opening is fixed text that identifies it as an AI representative. The consent page says the same thing before a microphone is used. Later wording still depends on the agent following its instructions.

Decisions the server owns

Inside the cap, the conversation can continue. Above the cap, the owner approves or rejects that exact amount. Purchases, contracts, and recordings are outside the mandate. The money cap is not placed in the model context.

A person can take it back

Either side can end the browser session. Withdrawing consent or revoking the mandate ends server authority. The open page rechecks that authority about every four seconds.

How transcripts are kept

No audio recording is requested. If a verified callback arrives, the app can keep transcript text for up to 30 days. The owner can export that app copy or delete it. Provider retention, backups, and files already downloaded are separate from that deletion.

Who processes audio

When a session starts, live microphone audio is processed by ElevenLabs to run the voice agent, including its language model. A session starts when the flags are on and the person at the browser agrees.

Current preview

What is in the product today.

  • The working surface is the mandate studio: one participant, one topic, a private cap, a time window, and an escalation contact. Signing in is how early access opens.
  • Voice runs in the browser the other party opens, and only when the voice flags are on. The representative is disclosed as AI.
  • Approval of an exact proposal permits sandbox discussion. Purchases, contracts, and recordings are refused by the server.
  • The receipt code can verify a signed provider callback and recompute its hash. The post-call webhook is not registered, so a live conversation has not produced that receipt. The 15 October 2026 rehearsal did not store one.
  • Agent-to-agent negotiation, parallel envoys on one budget, and multilingual sessions are early access. Receipts are on the roadmap. Handover of an exact proposal is in the studio preview.
  • There is no certification, no published price, and no claim that a spoken sentence is a contract. Tenant isolation uses row-level security. That is an engineering control.

Routes that exist today are listed for developers. Module status is on Modules. The studio itself is marked sandbox. Draft privacy and terms still need legal review. Questions are on FAQ.