Nothing happens without a person.
Agents prepare. People decide. Every action is written down where you can see it.
Six rules the system keeps
They are built into CanopyBay itself, so no prompt, setting or clever message can talk an AI past them.
- Each AI sees only what its person sees.
- A part-timer’s AI sees their own tasks, not payroll.
- Approvals happen in CanopyBay, never in a chat.
- Changes to the system need a second person.
- Money stays with people.
- No AI can release a payment or change bank details.
- Every action is logged.
- Who asked, which AI, what changed and who approved it.
- Records can’t give orders.
- Text inside a record, like a customer’s message, is read as information, never as an instruction.
- You choose the AI.
- Decide which AI providers your staff may use, and where your data is stored.
Every action, written down
The log is open to you at any time. Requests that break a rule are blocked and logged too.
| Time | Who | AI used | What happened | Result |
|---|---|---|---|---|
| 7.18am | Priya | ChatGPT | Arranged cover for two Saturday shifts | Approved |
| 9.02am | Joanne | Claude | Sent 6 enquiry replies | Approved |
| 10.20am | Wei Ming | ChatGPT | Matched 41 payments | Approved |
| 11.05am | Ms Chua | CanopyBay chat | Asked to open October payroll | Blocked, not their role |
| 4.11pm | Harun | Claude | Approved next month’s growth plan | Approved |
Sample data.
Move over in weeks. We never see your data.
With most providers, your records go to their migration team to be cleaned up. With CanopyBay, the move runs inside your own private workspace, and our staff have no access to it. Your data stays private.
- Week 1
Connect your old system
Export your files or connect the old system. Everything goes straight into your own encrypted workspace.
- Week 2
Agents map it, inside your workspace
Fields are matched and duplicates found. Your admin checks the mapping and approves it.
- Weeks 3 to 4
Run side by side, then switch
Run one full cycle, such as payroll or invoicing, in parallel. Then switch, one site at a time.
| Typical provider | CanopyBay | |
|---|---|---|
| Who handles your files | Their migration team | Tools inside your workspace |
| Who can read your records | Their staff, during the move | Only people you authorise |
| Copies of your data | Often kept on their side | None outside your workspace |
| Time to switch | Months | Weeks, one site at a time |
Questions about safety
How your own AI connectsCan the AI send messages or move money on its own?
No. It prepares the work and a person approves it in CanopyBay. Payments and bank details stay with the people you authorise.
Why local AI?
Everyday AI work runs well on one machine in your building, so there are no token bills and no AI subscriptions, and private records never leave the building. It’s part of Enterprise.
How long does the move take, and who sees our data?
Usually a few weeks per site. The move runs inside your own workspace, so our staff never open, read or keep your records.
Where are our records kept?
In the region you choose. Only the people you authorise can see them, and every access shows in the activity log.