Confidential documents, intellectual property and personal information deserve more than a promise. Here is exactly how your crew is fenced in, watched and held accountable while it works for you.
Every crew we install follows the same rules, whatever your industry or tools.
Your crew connects only to the specific folders, inboxes and tools you approve, read-only wherever possible. Connections run through dedicated service accounts, never anyone’s personal login, and you can revoke access at any time.
Every client gets its own agents, workspace, credentials and memory. Nothing about your business is visible to, or reused for, any other client.
Emails, texts, payments, e-signatures, deletions and publishing all wait for a named person on your team to approve them. The crew prepares the work; a human decides what goes out.
Passwords and keys live in an encrypted vault. They are never pasted into chats or documents, and they are rotated on a routine schedule.
Every action a crew mate takes is logged with a timestamp, so you can see exactly who did what, and when.
We sign an NDA and a data processing agreement. Sensitive documents stay in your own systems, like Google Drive or SharePoint, instead of being copied out. We keep only what the work needs and delete it when the engagement ends, with written confirmation.
Before launch we agree in writing which data the crew never touches, such as Social Security numbers, medical records or trade-secret folders, and we enforce that through permissions, not just policy.
We use business-grade AI services under terms that exclude customer data from model training. Your information is used only to do your work.
Reads, drafts, approvals, sends and blocked attempts are all logged with a timestamp. You can review the log any time, and pause one crew mate or all of them with one click.
Signed before we see anything confidential.
What we process, why, where it lives and for how long.
The data and folders the crew never touches, enforced by permissions.
Which actions need sign-off, and the named person who gives it.
Written confirmation that our copies are deleted when the engagement ends.
Healthcare (HIPAA), financial services and other regulated work is scoped separately before you sign, so the right safeguards and agreements are in place from the start.
Revoke any connection, pause any crew mate or end the engagement at any time. Read our AI use policy and privacy policy, or email hello@thebackofficecrew.com.
A 30-minute call to walk through your data, the systems the crew would touch, what stays off-limits and who approves what. Bring your IT or compliance lead.
No obligation · NDA available before the call
