A person says yes. The run stays visible.
Workers run in the open. Needs you holds what would leave Framed. The Log is what happened. Workspace data is stored in the EU.
Approval
A person approves before anything changes a system you connect.
A mail draft a host AI asks for waits in Needs you. A host can start a process only where its owner allows that, and the run still stops for a yes before it changes anything.
Runs and tool use can be inspected in the Log.
Workspace data in the EU. It is not used to train foundation models. You can export and delete. A data processing agreement is available on request.
More than one model underneath, so the workspace is not priced by a single vendor's rate card.
Residency and export
Detail on residency, subprocessors, and export is on the security page.