Trust and Governance
Telemus AI provides permission, review and audit controls around supported assistant actions. Their behavior depends on the action, host and selected policy. They do not make every integration or exported file automatically safe.
Action review
When an action requires confirmation, inspect its target, requested operation and consequences before approving. Preparing a draft or artifact does not itself authorize sending or publishing it. Cancellation cannot undo effects already completed.
Some operator-configured policies run ordinary work without a prompt. Channel execution defaults can differ from local-app controls. Review your configuration before granting access to sensitive files or services. See Permissions.
Optional action_policy.smart_approval can automate some confirmation decisions.
It is off by default. Enabling it changes when a visible review is requested;
review the scope carefully rather than assuming every risky action will prompt.
Evidence and audit
Supported artifacts can retain source and activity information for inspection. Use those records to review what happened, but do not interpret a confidence score or completion message as independent proof of correctness. Some outputs have incomplete or unavailable provenance.
Audit data can help investigate an action. Its presence does not guarantee that every operation succeeded or that every private detail was removed.
Credentials and private content
Use supported sign-in and secure configuration controls for credentials. Do not put secrets in assistant prompts, notes, skills, screenshots or public reports. Platform secure storage and redaction depend on the host and integration.
Mark supported notes or documents private or redacted when appropriate.
Those scopes restrict supported sharing workflows, but do not promise removal
of every existing copy. Private branches can remain represented by a generic
label without exposing their title or allowing ordinary branch-offset restore.
Review exports and support bundles before sharing. A successful export or a redaction indicator is not a guarantee that all user-written text is secret-free. The operating-system account, connected providers and installed executable plugins also have their own access boundaries.
Account security
Password changes and account deletion require confirmation. Password entry uses a masked dialog; if the required dialog is unavailable, deletion does not proceed. If you signed up with Google or Apple and have no password, select Email Me a Code in the account-security form. Enter the emailed one-time, 6-digit code to confirm the password change or account deletion. The code expires after 10 minutes.
For signup, email verification, password recovery and billing, see Licensing and account access. Do not delete your account to recover a license or reconnect a device.