What access do my AI agents need? Less than you'd think.
Handing anyone the keys to your business tools should make you a little nervous. Here's exactly how access works, what the agents never touch, and how you can shut everything off in five minutes.
The rules I work by
Six rules, on every account, from day one.
Least access, every time
An agent gets access to the one tool a task needs, at the lowest permission level that works. If a task needs read-only, it gets read-only.
Seats, not your password
Wherever a tool allows it, you add me as a user with my own login. You can see what that user does and remove it any time.
You own every account
Anything I set up inside your tools is created in your business's name, on your accounts. Workflows that run on my automation platform are documented, and I export them to you if we stop working together.
Nothing goes out unchecked
Emails, posts, invoices and anything a customer will see get my review before they're sent, unless you've told me a task is safe to run on its own.
No payments, no passwords in chat
Agents don't move money, change billing or see payment card details. Passwords live in a password manager, not in emails or AI prompts.
Five-minute off switch
Remove my user seats and the agents lose access immediately. You keep everything that was built.
What the agents can touch
Here's the typical access for the tools small businesses use most, and why each level is enough. We only connect the tools your current list actually needs.
| Tool | Typical access | Why that's enough |
|---|---|---|
| CRM | A user seat that can edit contacts, deals and notes | Logging calls, updating next steps and cleaning duplicates |
| A shared inbox or specific labels, not your personal mail | Sorting, drafting replies and turning requests into tasks | |
| Calendar | Booking access on the calendars that take appointments | Scheduling, reminders and reschedules |
| Shared drive | The folders a task needs | Filing, organizing and drafting documents |
| Website | An editor-level account | Text, page and listing updates |
| Social and ad accounts | Reporting access, plus posting where you've approved it | Weekly numbers and scheduled posts |
| Accounting software | Draft or entry level, so your bookkeeper approves | Draft invoices, enter receipts and bills |
What they never touch
- Bank accounts and payment processing
- Payroll and HR files with personal information
- Anything regulated that requires a licensed professional's sign-off
- Your customers' payment card or government ID data
If a task on your list would need any of these, it stays with your team. The agents can still do the computer work around it, like preparing the paperwork for your bookkeeper or drafting the reminder your office manager sends.
Where your data goes
Before anything is connected, I'll show you exactly which AI tools will touch your data and how each provider says it handles business data. Client work stays in your tools wherever possible. When an agent needs to process something (summarizing emails, drafting a report), it reads what it needs for that task.
If your business has specific rules (healthcare, legal, financial data), tell me on the first call and we set the guardrails before any agent touches anything. Where the rules require a signed agreement with a software vendor, that work waits until the agreement is in place, or it stays off the list.
For a wider look at the question, read Is it safe to give AI access to my business data?
How access gets set up
We pick the first tasks
Access follows the work. We start with the top of your list and connect only the tools those tasks need.
You add me as a user
In each tool, you create a seat for me at the lowest role that works. You stay the owner and admin.
Shared logins go in a password manager
If a tool doesn't support extra users, the login is shared through a password manager, never pasted into an email or a chat.
We write down the guardrails
Which tasks run on their own, which need my review, and which need yours. You see it before anything starts.
You see the work every week
The Friday report lists what the agents did, and your tools keep their normal history and activity logs. See a sample report.
The five-minute off switch, step by step
If you ever want everything shut off, today, here's the whole process:
- Remove my user seat from each tool (your CRM, inbox, drive, website and so on).
- In your Google or Microsoft account settings, remove any connected apps I set up.
- Change any password that was shared through the password manager.
That's it. The agents lose access immediately, and everything that was built (automations, documents, SOPs, reports) stays in your accounts. You don't need my help to do it, though I'm happy to walk you through it.
Questions owners ask
Can I see what the agents did?
Yes. You get a weekly report of what was done, and anything in your tools shows up in their normal history and activity logs.
What happens to my data if we stop working together?
You remove my access, I export any workflows that ran on my platform to you, and I delete my working copies of your files. Anything built in your tools is already in your accounts.
Do you use my data to train anything?
I don't train anything on your data. On the AI tools I use, I pick the business plans and settings that keep your content out of model training wherever the tool offers that, and I'll show you which ones on request.
Can you sign an NDA?
Yes. Send it over and I'll review it.
What if an agent makes a mistake inside one of my tools?
Anything customer-facing waits for my review, so most mistakes get caught as drafts. Changes inside your tools leave a history, so they can be traced and undone. When I find a mistake, I fix it and tighten the agent's instructions. More in What happens when AI makes a mistake?
Should my business have an AI policy?
If your team uses AI tools on their own, yes. A one-page policy covers what data can go into which tools and who checks the output. Here's what a small business AI policy should include.
Still nervous? Good.
Ask me anything on a call. Book 30 minutes, no pitch, or send me a note with your questions first.