Automations & security
Every agent visible. Every switch yours.
See every agent, what it does, when it runs and its guardrail, switch each one on or off, and see who signed in and what was downloaded.
Protects money: A broken safeguard shows up as a failed nightly test run before it becomes a PHI incident.
The problem
Why it's hard today
Software that works in the background is hard to trust when nobody can see what it does or turn it off.
Medical records raise the stakes. A firm needs to know who signed in, what was downloaded, and that the safeguards still hold after every release.
How it works
4 steps, start to finish
- 1
One list of automations
Grouped by stage: intake, presuit, litigation, settlement and firm operations. Each row says what it does, the task or money it is meant to save, its schedule and the guardrail it runs under.
- 2
Your firm decides
Owners and admins switch automations on or off for the firm. A few safety jobs stay on: limitations warnings, approval expiry and the delivery watchdog.
- 3
Security & access
Owners and admins see sign-ins, downloads and shares, and what the safety checks stopped.
- 4
Red team every night
Prompt injection in uploaded documents, cross-firm access, approval bypass, SSN and PHI leaks and misuse of McGee's tools are replayed against a throwaway sandbox.
Approval: Only owners and admins change a switch, and every change is recorded in the audit log.
Questions
Automations & security: FAQ
Does the red team touch our data?
No. It runs against an in-memory sandbox with a mock model and mock outbound, and stores its results without PHI.
Can we turn off an automation we don't want?
Yes, except the locked safety jobs. Some, such as the morning briefing and the file cleanup plan, start off and wait for your firm to turn them on.
Are drafts checked against the operating rules?
Yes, in part. Outbound drafts pass mechanical checks drawn from the firm's operating rules, and a nightly check lists anything that sat too long. More of the rules are being wired in.
Start with one case. Keep the queue.
Open the sample firm and approve a records request, or set up your own workspace in a few minutes. Your firm signs our BAA in the app before any client records go in.