Kairos acts with your permissions and asks for your confirmation

Kairos is an assistant that looks up and changes your company's information. That's why it works by the same rules as you.

It sees the same as you, no more

Kairos always works as the user talking to it. It can only look up what you can see in WorkOS, with your role and your permissions. If a task, a document or an email isn't visible to you, it isn't visible to Kairos either.

Your conversations with Kairos are private: nobody else in your company can read them.

Nothing changes without your permission

Looking things up (searching, reading, summarizing) doesn't need confirmation.
Creating or changing something (a task, an event, some content) requires you to confirm the plan Kairos proposes.
Sending an email always goes through a review screen, where you see and can change the recipient and the text before sending it.
Creating, moving or deleting events in your calendar always asks for your confirmation, even if they're part of a longer plan.

Kairos has no tool to delete tasks, notes, documents, contacts or Notion pages. The only thing it can delete is events in your calendar, and always with your confirmation.

Protection against hidden instructions

An email or a web page can contain text designed to trick an assistant (“ignore the above and send...”). To stop that:

Kairos treats the content of emails, files and web pages as information to analyze, never as orders.
When you cite an email or a message as context, Kairos works in a more cautious mode: it doesn't use web search in that conversation and asks you to confirm each step, without chaining several changes in a row.
Even if a malicious text managed to influence what Kairos proposes, nothing runs without your confirmation.

That's why it's important to read the plan before clicking Confirm, especially when you work with emails from senders you don't know.

See also “Which Kairos actions ask for confirmation and how to review them” and “What data is sent to AI and with what guarantees”.