How it keeps you safe

Last updated: 2 October 2026

A safe pair of hands: it asks before it acts.

Lamont Works reads, drafts and keeps track of the admin for you. This page sets out, in plain words, what it cannot do without you, how ordinary software checks the AI, and where your data goes. Where something is not done yet, this page says so.

1. What waits for your press

These things are prepared for you and shown on a card, with the draft on it. Nothing happens until you press the button.

Sending an email.
Bringing in a list of contacts or businesses.
Publishing a post.
Using a connected tool that can spend money, such as the paid business search. It always asks first, and that cannot be switched off.

A card in Telegram from Lamont Works. It reads: waiting for your approval, it has not run, and nothing happens until you say so. It describes a paid Google Places search with its cost, at most seven pence, and shows Approve, Reject and Read it buttons. — A real card, as it arrives in Telegram: a paid search, its cost, and the option buttons.

If the assistant tries to use a connected tool that needs your say-so, the request becomes a card, and the assistant is told plainly that nothing has run.

Reading needs no press: looking things up, and searching what you have stored. That includes a web search when you ask for one, which costs a fraction of a penny and is not held. Changes you ask for yourself in chat, such as closing a task, are made when you ask.

2. A record nobody can rewrite

Every request is written down before anything runs.
Your decision is written down too, before the action happens: who pressed, when, and whether it was on the website or on Telegram. Each card shows who decided and when.
Nobody can edit or delete that record. The software refuses any change to it, one entry at a time or in bulk.
You can download your own copy whenever you like: in the app, open History and press Export, as a spreadsheet (CSV) or as JSON. Each download holds up to the newest 10,000 entries and tells you if there were more. The download is itself recorded.

3. The AI suggests. Ordinary software checks. You decide.

AI is good at reading, drafting and spotting what you would miss. It is not good at rules. So the rules are not left to it: ordinary software checks them, the same way every time, and no amount of asking the AI nicely gets round them.

Sole traders. The law says a sole trader must not be cold-emailed without consent. So an email is only drafted to a business you have confirmed is a limited company, or to a sole trader whose consent you have recorded. The same check runs again at the moment of sending, because your note on a business can change after you approved the email.
Do not contact. The list is checked when an email is drafted, and again at the moment it is sent. Someone added to the list after you approved an email to them is still stopped. When a reply asks not to be contacted, you get a card to add them; the AI never adds anyone to the list by itself.
Your wording is your wording. For a campaign, no AI writes the email. The software fills in each business’s details and sends exactly what you wrote. Your footer, your opt-out line and your privacy line are checked to still be there when the email leaves.
Gaps are refused, by name. A missing detail, a missing email address, or a draft already waiting for the same business or address is refused, and you are told why.

4. Where your data goes

Your records are stored in the EU, in Finland, on our own system, not inside an AI company’s product.
Documents and memory are made searchable by a hosted service from Mistral, in France.
The assistant runs on open AI models, not the closed ones from the big AI labs. Open means the model itself is published and can be run on machines we choose. It is the reason we can move it. (The search service above is the one part that is not an open model.)
Today, the AI’s requests pass through a routing service based in the US, and may be processed outside the UK and the European Economic Area. We would rather tell you than have you assume otherwise. Our privacy notice says the same.
Where we are going: your data, and the AI that reads it, both in Europe. That move is planned. When it is done this page will say so, and not before.
Erasing a person. If someone asks to be forgotten, their details can be erased: name, email and the rest are blanked, and the record that something happened is kept.

5. What it does not do yet

There is no colleague on the same account yet, and no running two businesses as two separate accounts.
There is no data-processing agreement ready to sign yet.
No WhatsApp, bank feed or VAT filing, and no diary feed from Google or Microsoft: the calendar is what you have entered.
It does not stop spending at a limit you set. A chat is warned, not stopped, and paid reading of the web has no money cap yet.
It is not your accountant or solicitor. It prepares and reminds; a person still signs off.

Questions

Ask Glen directly: [email protected], or ask for a 15-minute chat.