Security & trust
Built so AI can’t do more than you allowed
yae is the layer that decides what your AI may do, so it has to hold up when other things fail. Here’s how, in plain language.
Protected actions
What is a protected action?
An action in a system you’ve marked as protected, such as making a payment in your accounting system. That system only acts when it receives yae’s authorisation for that exact action.
What stops an AI going around yae?
yae holds the credentials for the systems you connect, so the AI can’t call them directly. A protected system also checks yae’s authorisation itself: a request that skipped yae has none, so the system refuses it.
Can an authorisation be reused?
No. Each one is signed by yae, short-lived and tied to one action. It can’t be used for a different amount, a different recipient or a second time.
Data
What can an AI reach?
Only the systems you connect, and only the actions you list for each one. Anything you haven’t allowed is blocked.
Can we mark data by how sensitive it is?
Not yet. Marking data public, internal, confidential or restricted is on the way. Until then, yae shows data as not classified rather than guessing.
Where is our data stored?
We’ll confirm where yae stores your organisation’s data, and for how long, in writing before your pilot starts. Ask us any time at hello@yae.digital.
When things go wrong
What happens if yae is unavailable?
Protected actions wait rather than run unchecked. If yae can’t confirm an action is allowed, it doesn’t happen.
How do we stop an AI quickly?
Stop the AI in one step. It stays stopped until an admin deliberately lets it back in.
What if our subscription payment fails?
Your rules stay on. Billing never controls authority, so your AI never runs unrestricted because of a payment problem.
Evidence
What does yae record?
Every request, decision, approval and outcome: which AI asked, what it asked to do, which rule applied and who approved it.
Can the record be changed?
The trail is tamper-evident. If an entry is altered, it shows.
Privacy laws
Does yae make us POPIA or GDPR compliant?
No tool can do that on its own. yae gives you the controls and the records that help you meet your obligations when AI handles personal information.
Which certifications does yae hold?
We’ll list them here as we earn them, and we won’t claim one we don’t hold.
How do we report a security issue?
Email hello@yae.digital. We’ll reply within 1–3 working days.
Give AI access. Keep the authority.
Questions from your security or legal team? We’ll walk them through it.