DERequest access

Control first. Then automation.

SPREAD OS runs on one rule: agents propose, you approve, the system executes. Here is what that means in practice.

  • Approval before anything leaves

    Every reply, new email, invoice, new contact and calendar invitation waits for your OK, with a push to your phone. After you approve, the system executes it exactly once.

    • Reply
    • New email
    • New client
    • New contact
    • Invoice
    • Calendar invite

  • Agents without keys

    Agents can’t send email, write to your accounting or touch your bank account. They have no access to the mail server, no bank keys and no server access. Their network is closed except for the connection to the AI model.

  • Email is treated as untrusted

    For agents, an incoming email is plain text, never an instruction. If a draft goes to someone outside your contacts, you see a clear warning before it is sent.

  • Workflows with a brake

    Recurring workflows only run after you switch them on. If an agent changes a workflow, it switches off again. An emergency brake stops any workflow that runs more than 50 times an hour.

  • Every step on the record

    Each client has a timeline of what was created, executed, discarded or failed, and by whom. You can always see what an agent did.

  • Servers in Germany

    SPREAD OS runs on servers in Germany, with a daily backup of the database. Every company gets its own installation instead of a shared database.

How we use AI

Our agents run on the latest AI models. To do a task, an agent sends the context it needs to the model, for example the email it is answering.

For every customer installation, AI runs under a commercial agreement with the model provider, including a data processing agreement. We only use providers whose terms exclude training models on your data.

What we’re still working on

  1. Planned

    Team accounts with roles and permissions that apply to agents, too.

  2. Planned

    A public list of every subprocessor and a template for the data processing agreement.

  3. Planned

    An external review by a data protection advisor before the first customer company goes live.

Questions about security?

Write to us. You get an answer from the people who build SPREAD OS.

info@spread-os.de