--- title: "Is it safe to connect an AI agent? Concierge | Chargezen" description: "How Concierge keeps agents in bounds: access per agent, a private computer per job, sign-ins that stay with you, a record of every step and private memory." url: "https://chargezen.com/concierge/security" lang: "en" --- Canonical URL: https://chargezen.com/concierge/security # Give an AI agent real work without giving it the keys. Concierge is safe to connect because each agent gets only the access you tick, works on a private computer that is discarded after each job, never touches money, and keeps a record of every step. Chargezen is SOC 2 Type II certified and supports single sign-on with SAML 2.0. [Start Concierge](https://admin.chargezen.com/signup?product=concierge) Chargezen is certified SOC 2 Type II Chargezen is certified single sign-on supported SAML 2.0 single sign-on supported a teammate approves refunds No money moves a teammate approves refunds The problem An AI agent is not like other software you connect. It decides what to do next, so the real question is not only what it can do, but what it can't. Here is exactly where Concierge draws those lines. ## Four limits on every agent. ### Access per agent Tick the capabilities and channels each agent gets. Without a capability, it can't use that tool, however it is asked. ### A private computer per job Code and spreadsheets run on a computer closed off from your other systems, discarded when the job ends. ### Sign-ins stay with you On a site that needs a login, it hands you the screen. Your password never goes into the chat. ### A record of every step Every request, approval, tool use and reply is saved in the conversation. ## Secure an agent before it starts. 1. 1 ### Tick its access Only the capabilities and channels its job needs. 2. 2 ### Set team permissions Decide who can manage agents and channels. 3. 3 ### Try it first Test it in Playground, away from live customers. 4. 4 ### Review its work Read Operate > History in the first week. ## Memory, connections and deleting data. Where the detail usually matters to a security review. Memory Agents learn how your business works, not who your customers are. Customer-facing memories never name a specific customer, and Forget erases a memory's text for good. ChatGPT, Claude and other assistants They sign in with OAuth, act as the teammate who connected them, and lose access the moment you disconnect them or remove that teammate. Slack Slack requests are signature-checked and messages from other bots are ignored. Your own model keys Entered in secret fields on the Integrations page. You can disconnect them at any time. Call recordings Kept for the number of days you set, from 1 to 3,650, then deleted automatically, unless you place one on legal hold. Deletion requests Chargezen processes Shopify customer data erasure requests. For anything else, email privacy@chargezen.com. ## What happens when. The situations people ask about most, and how Concierge handles each one. | When | What Concierge does | Who stays in control | | --- | --- | --- | | Someone asks for an action | It runs, if the agent has that capability | You, through the access you gave it | | The agent thinks of something extra | It offers first and waits for a yes | The person it is talking with | | A customer wants a refund | Opens the return. Agents never move money | A teammate approves the refund | | A customer asks about their account | Asks for a sign-in code before sharing private details | The customer, who proves who they are | | A website needs a login | Hands you the screen to sign in | You. The password stays out of the chat | | A job needs code or files | Uses a private computer, then discards it | Nothing carries over to the next job | | Someone asks what its instructions say | Keeps your instructions confidential | You, who wrote them | ## What that gives you. ### Autonomy with limits Agents get on with the work inside lines you drew. ### Less to protect No shared job computer and no passwords in chat. ### Answers for your review See what happened, step by step, whenever someone asks. ## Put a digital employee to work. Concierge answers your customers, runs back-office work on its own computer and gets better every week. See it on your own store. [Start Concierge](https://admin.chargezen.com/signup?product=concierge) [Back to Concierge](https://chargezen.com/concierge) ## Common questions ### Is it safe to connect an AI agent to my store? With Concierge, each agent gets only the access you tick, works on a private computer discarded after each job, can't move money, and records every step. You decide what each agent can reach. ### Is Chargezen SOC 2 certified? Yes. Chargezen is SOC 2 Type II certified. See the Trust Center for how to request the report. ### Does Concierge support single sign-on? Yes. Chargezen supports single sign-on (SSO) with SAML 2.0. ### Can an agent act without asking? It carries out what someone explicitly asks for, within the capabilities you gave it. Anything it thinks of on its own, it offers first and waits for a yes. Refunds always stay with a teammate. ### Do agents see my passwords? When a website needs a login, the agent hands you the screen and you sign in yourself, so your password never goes into the chat. ### How do I remove an agent's access? Untick the capability or channel on the agent's Configure Agent page. Disconnect a connected assistant at any time, and removing a teammate ends the access of what they connected. ## Read more about security. [ ### Security docs Where to find each control in the admin, with a checklist.](https://chargezen.com/docs/concierge/security) [ ### Trust and privacy How Concierge earns trust with your customers.](https://chargezen.com/concierge/features/trust-and-privacy) [ ### Trust Center Chargezen's certifications and documents.](https://chargezen.com/trust) [ ### Concierge for larger teams Defined jobs, team permissions, SSO and a full record.](https://chargezen.com/concierge/enterprise) [ ### What are AI guardrails? Glossary: the limits that keep AI on task.](https://chargezen.com/glossary/ai-guardrails) [ ### What is an audit trail? Glossary: the record of who did what, and when.](https://chargezen.com/glossary/audit-trail)