Skip to content
Identity and access

Give every AI agent its own identity and only the access you grant.

Identity and access for AI agents, built on Zero Trust. Your security team can approve agents that act on your company's data. People and agents follow the same rules, and every access change goes to the audit log.
Read the identity guide

From one agent to every team

An illustrative example: two teams, two agents and one set of access rules, approved once.
  • Support starts with one agent

    Your support lead creates a support-triage agent and adds it to the support group. It reads the support knowledge in your Libraries, and nothing else.

  • Finance adds the next agent

    Your finance lead creates an invoice-review agent and adds it to the finance group. It reads the invoices it needs and never sees support’s knowledge. Nobody rewrote a rule.

  • Your security team sees who did what

    The audit log shows both leads’ changes in order: who created each agent, and in which group. Each entry is timestamped and ready to review.

Keep every access in your hands

Grant each agent what its job needs, see every change, and keep the sensitive decisions with your people.
  • Every request traced to its agent

    Each agent works under its own identity. Create one agent per job: Duale AI charges per Task, not per agent.

  • One set of rules to approve

    Your people and your agents join the same groups and follow the same permissions. Ready-made roles get your teams started on day one.

  • Least privilege from the start

    A new agent reaches only its own work. It uses your Tools and reads your Libraries only when you grant them. No one can grant more access than they hold.

  • Access changes within a minute

    Grant or remove a right, and the whole Platform applies the new rule.

  • Sensitive decisions stay with people

    Removing a member, retiring an agent and other sensitive changes need a person from your team, signed in with a passkey or a security key.

  • Every access change on record

    The audit log shows who changed which access, and when. Export it to your SIEM. Even reads of the log are recorded.

Zero Trust on every request

Duale AI allows or refuses each request on who is asking, which action and which resource, never on where it comes from.
How Duale AI checks every requestA person in your team or an AI agent sends a request. Duale AI checks who is asking, which action and which resource, then allows or refuses the request. Each access change updates your access rules and goes to the audit log.

A person and an agent that hold the same right get the same answer. See how access policies work.

Keep each team's sensitive work with its own agents

Each use case shows the access its agents get, set per team or per client.
  • Sales

    Give each client its own agent, with access to that client’s questionnaires and records only.

  • Legal

    Keep your contracts within reach of your legal team and its agents only.

  • IT and security

    Decide which systems your security agent may reach, and keep its findings away from other teams’ agents.

Before you create your first agent

  • One fixed price per Task

    A standard Task costs €0.10 and a fast Task €0.20, excluding VAT. See pricing

  • Your choice of hosting

    Use the managed service, hosted in the European Union, or run the Platform in your own infrastructure.

  • Encrypted storage

    All stored data is encrypted, from Library files to database backups.

  • Unlimited agents

    Add agents as your teams and use cases grow.

Your security team can review the rest of the controls in the Trust Center.

Identity and access questions

The people you choose, such as your platform team. A team lead can create and update the team’s agents, but not issue their credentials. Read the agent credential guide.

Yes, to match your own teams and projects. See how legal keeps contracts to its own agents, and read the access policy guide.

No. The agent keeps working on its current credential while the new one takes over. See how to renew a credential.

No. Nothing in a request can make an agent act as a person or as another agent. See the authorization controls in the Trust Center, and see how Duale AI tells people and agents apart.

Yes. A person you grant the right can recover a retired agent, and the access rules written for it apply again. Read how to retire and recover an agent.

Set your access model once. Let every team build on it.

Read the identity guide