AI security for business

Ward Consulting AI · November 11, 2026

Why security is a buying question

A helper that reads your inbox, drafts messages and looks at your calendar touches some of the most sensitive parts of your business. Security is not a feature you add later. It belongs in the first conversation, and a provider who treats it as an afterthought is showing you how the rest of the work will go. Ask before you connect anything, and keep asking as the work grows.

What a provider should do

• Limit access to the information you choose, and say in writing what each helper can read.
• Let you sign in to your own accounts yourself, so no one on the provider's side holds your passwords.
• Start helpers in test mode, where they write drafts and do not send anything.
• Require your yes before anything spends money, goes to someone for the first time or cannot be undone.
• Give you a way to stop everything at once.
• Explain in plain words who holds which account and how you would take it back.

Each item is a question you can test. Ask the provider to show you where the limit is set, who signs in where, and how the stop works. An answer you can see is worth more than an answer you are told.

What you should never hand over

• Your passwords, or the answers to your security questions.
• One-time codes sent to your phone or email.
• Full card numbers, bank logins or account recovery codes.
• Master access to every account at once.
• Any secret key that lets someone act as you without asking you first.

If you have already shared one of these items, change the password or revoke the access right away, then tell the provider. A good provider will help you do that without asking for the secret itself.

A legitimate provider will not ask for these. If someone does, stop the conversation and check with the company through a number or address you already trust, not one the message gave you.

How access should be limited

Good access is narrow. A helper that sorts your inbox should see the inbox, not your bank. A helper that drafts a quote should see the scope and prices you entered, not your whole drive. When you add a new task, the new access should be a deliberate choice you make, and you should be able to remove it again without rebuilding anything. Narrow access also makes a problem easier to find. When a helper reads only one folder, a strange result points to one place to look. When it reads everything, the search takes much longer.

An example

For example, a contractor might let a helper read the quote requests that arrive by email and nothing else. The helper drafts a reply for each one and places it in a list. The contractor reads the list, sends the replies he approves and removes the access on the day he decides the helper is no longer needed. Nothing in that flow requires the helper to hold a password or a payment method.

Ask what happens when a helper's task ends. Access that stays open after a task is finished is the kind of gap that is easy to miss, so the provider should be able to show you how access is reduced when a task is retired. Keep a short written list of what each helper can read, and review it every few months.

Questions to ask a provider about security

1. Which accounts will you need me to connect, and which of them can you not do without?
2. Where do you write down what each helper is allowed to read?
3. Will you ever ask for a password or a one-time code?
4. Who can see my information on your side, and what happens to it if I stop?
5. How do I pause everything, and how long does that take?

Keep a copy of the questions and the written answers you receive. If something changes later, you can point to what you were told rather than relying on memory.

Ask for the answers in writing. A provider that can explain its security plainly is one you can hold to its word. For the approval side of the same question, our human approval guide covers what waits for your yes. Our questions before buying guide has the full list of what to ask.

What Ward Consulting AI does, and how the plans differ

Our helpers read only what you point them at. They say they are AI when asked, they never ask for your passwords, and you sign in yourself. Typing PAUSE stops a helper. Helpers start in test mode and write drafts, and anything that spends money or cannot be undone waits for your yes. We do not give legal, tax or financial advice, so keep those questions with a professional.

The Email and Inbox Agent and the Workflow Agent are free. Starter is $29.99 a month for one paid agent of your choice, and Pro is $99.99 a month for all four paid agents. Elite is $249 a month for teams with up to 20 seats. Plans are open now, and you can cancel anytime. Your own AI account is paid separately.

Find where to start

To talk through the access your business would need, find where to start. You can also learn the basics with the free step-by-step Grok training.