# Approvals, security, and privacy

Your agents do the work, but nothing important happens without you.

## What agents ask first

Before an agent sends an email, makes a payment or publishes something, it stops and asks in the chat. The approval card says what it wants to do and why, and you choose to allow or refuse it. The same goes for risky steps on its computer, like a command that would delete files.

- **Allow once** lets this one action go ahead.
- **Always allow** stops asking for that kind of action.
- **Refuse** and the agent waits, or finds another way.

Approval cards also come to your iPhone as notifications, so an agent isn't stuck while you're away from your desk.

## Purchases

When an agent buys something for you through Link or Shop, a checkout card shows what it's buying, the total and the card that pays, with **Allow** (confirmed with Face ID) or **Deny**. Link pays with a one-time card, never your real one. See [Connect apps](/docs/connectors).

## Your data

- **Encrypted** at rest and in transit.
- **Isolated:** each customer's data is kept apart from every other customer's.
- **Never used to train a model.**

## Passwords and codes

Agents never see your passwords or one-time codes. Sign-ins are filled from the [Credentials Store](/docs/credentials) or 1Password after Face ID or Touch ID, or typed by you in a masked form. You sign in to connected apps on their own pages, so Simeon never holds those passwords either.

## Watch and step in

You can open an agent's computer at any time to watch it work, and **Take control** to stop it and take over. See [The agent's computer](/docs/computer).

## Your Mac

An agent only runs commands or works with files on your Mac after you allow it. You can choose **Never**, and change your choice in **Settings**.