Skip to content

Security

Control belongs at execution time.

Dialogo treats an AI workflow as an operational system: access must be scoped, sensitive actions must be reviewable, and results must leave evidence.

Least privilege

Connect only the systems and permissions a workflow needs. Provider credentials should remain outside model prompts and be handled by the configured integration boundary.

Approval gates

Use human confirmation for high-impact actions such as external communication, financial changes, production changes, or irreversible record updates.

Action history

Production workflows should record what was requested, which systems were used, what succeeded, what failed, and who approved sensitive steps.

Deployment review

Private or on-premise deployment does not automatically make a system secure. Identity, network access, model routing, secrets, retention, and monitoring still require an implementation review.