Give an AI agent real work without giving it the keys.
Concierge is safe to connect because each agent gets only the access you tick, works on a private computer that is discarded after each job, never touches money, and keeps a record of every step. Chargezen is SOC 2 Type II certified and supports single sign-on with SAML 2.0.
- Chargezen is certified
- SOC 2 Type II
- Chargezen is certified
- single sign-on supported
- SAML 2.0
- single sign-on supported
- a teammate approves refunds
- No money moves
- a teammate approves refunds
The problem
An AI agent is not like other software you connect. It decides what to do next, so the real question is not only what it can do, but what it can't. Here is exactly where Concierge draws those lines.
Four limits on every agent.
Access per agent
Tick the capabilities and channels each agent gets. Without a capability, it can't use that tool, however it is asked.
A private computer per job
Code and spreadsheets run on a computer closed off from your other systems, discarded when the job ends.
Sign-ins stay with you
On a site that needs a login, it hands you the screen. Your password never goes into the chat.
A record of every step
Every request, approval, tool use and reply is saved in the conversation.
Secure an agent before it starts.
- 1
Tick its access
Only the capabilities and channels its job needs.
- 2
Set team permissions
Decide who can manage agents and channels.
- 3
Try it first
Test it in Playground, away from live customers.
- 4
Review its work
Read Operate > History in the first week.
Memory, connections and deleting data.
Where the detail usually matters to a security review.
- Memory
- Agents learn how your business works, not who your customers are. Customer-facing memories never name a specific customer, and Forget erases a memory's text for good.
- ChatGPT, Claude and other assistants
- They sign in with OAuth, act as the teammate who connected them, and lose access the moment you disconnect them or remove that teammate.
- Slack
- Slack requests are signature-checked and messages from other bots are ignored.
- Your own model keys
- Entered in secret fields on the Integrations page. You can disconnect them at any time.
- Call recordings
- Kept for the number of days you set, from 1 to 3,650, then deleted automatically, unless you place one on legal hold.
- Deletion requests
- Chargezen processes Shopify customer data erasure requests. For anything else, email privacy@chargezen.com.
What happens when.
The situations people ask about most, and how Concierge handles each one.
| When | What Concierge does | Who stays in control |
|---|---|---|
| Someone asks for an action | It runs, if the agent has that capability | You, through the access you gave it |
| The agent thinks of something extra | It offers first and waits for a yes | The person it is talking with |
| A customer wants a refund | Opens the return. Agents never move money | A teammate approves the refund |
| A customer asks about their account | Asks for a sign-in code before sharing private details | The customer, who proves who they are |
| A website needs a login | Hands you the screen to sign in | You. The password stays out of the chat |
| A job needs code or files | Uses a private computer, then discards it | Nothing carries over to the next job |
| Someone asks what its instructions say | Keeps your instructions confidential | You, who wrote them |
What Concierge does
- Someone asks for an action
- It runs, if the agent has that capability
- The agent thinks of something extra
- It offers first and waits for a yes
- A customer wants a refund
- Opens the return. Agents never move money
- A customer asks about their account
- Asks for a sign-in code before sharing private details
- A website needs a login
- Hands you the screen to sign in
- A job needs code or files
- Uses a private computer, then discards it
- Someone asks what its instructions say
- Keeps your instructions confidential
Who stays in control
- Someone asks for an action
- You, through the access you gave it
- The agent thinks of something extra
- The person it is talking with
- A customer wants a refund
- A teammate approves the refund
- A customer asks about their account
- The customer, who proves who they are
- A website needs a login
- You. The password stays out of the chat
- A job needs code or files
- Nothing carries over to the next job
- Someone asks what its instructions say
- You, who wrote them
What that gives you.
Autonomy with limits
Agents get on with the work inside lines you drew.
Less to protect
No shared job computer and no passwords in chat.
Answers for your review
See what happened, step by step, whenever someone asks.
Put a digital employee to work.
Concierge answers your customers, runs back-office work on its own computer and gets better every week. See it on your own store.
Common questions
With Concierge, each agent gets only the access you tick, works on a private computer discarded after each job, can't move money, and records every step. You decide what each agent can reach.
Yes. Chargezen is SOC 2 Type II certified. See the Trust Center for how to request the report.
Yes. Chargezen supports single sign-on (SSO) with SAML 2.0.
It carries out what someone explicitly asks for, within the capabilities you gave it. Anything it thinks of on its own, it offers first and waits for a yes. Refunds always stay with a teammate.
When a website needs a login, the agent hands you the screen and you sign in yourself, so your password never goes into the chat.
Untick the capability or channel on the agent's Configure Agent page. Disconnect a connected assistant at any time, and removing a teammate ends the access of what they connected.
Read more about security.
