The objections, answered honestly

You're right — models do sometimes state nonsense with complete confidence, and a vendor who denies it is the one to walk away from. agnticr is built on the opposite assumption: the AI will sometimes be wrong, and the system has to be safe anyway.

• Anything irreversible — sending an email, changing a record, contacting a customer — stops at an approval gate. Your customer never sees anything a human didn't wave through.
• Whether a run succeeded is settled against receipts the agents cannot fabricate — message ids, record ids, delivery confirmations — never against the AI's own opinion of its work.
• Everything is on the record, so a mistake is a diagnosis, not a mystery — and the plan is fixed so it stays fixed.

In practice the first weeks look like this: you approve nearly everything, the wording and the plan prove themselves, and you loosen the gates deliberately, job by job. Trust is earned per job — it's never assumed on your behalf.

What it takes is the chasing, the compiling, the coordinating — the hours nobody was actually hired for. The judgment calls stay human by construction: the gates route decisions to your people, they don't route around them.

The rollout advice we give every customer: start with the job everyone hates. Let the person who used to do it become its owner and approver — they know where the bodies are buried, and answering a WhatsApp gate beats an afternoon of chasing. Team resistance mostly evaporates when the first thing the AI eats is the task they resent, and the hours it frees go visibly back to customers rather than to a headcount spreadsheet.

A fair instinct, and the right question to ask every vendor — including us. The factual answers for agnticr:

• Your data is stored at rest within the EU, isolated per tenant, visible only to the people you've authorized.
• The AI models that do the thinking are global — some run in EU data centers, some don't. What matters is the terms they run under: your data is never used to train them, and it can never surface in someone else's answers.
• What agnticr itself learns lives in your plans and records, in writing, where you can read it — never inside a model.
• Credentials to your systems are held server-side. The AI never sees a password — agents can only call the specific operations you've approved.
• Everything the agents do is logged and auditable — designed against the transparency and oversight demands of the EU AI Act, with GDPR as table stakes.

It's worth demystifying how these models are actually trained, because the scary version is mostly a misunderstanding of consumer apps. A model from OpenAI or Google is trained in enormous batch runs on curated datasets, finished months before you ever type anything — using it teaches it nothing. Between requests it remembers nothing: your question passes through it the way a call passes through a phone line. The “my data showed up in someone else's chat” stories come from free consumer apps, where conversations could be used for future training rounds. Business API traffic — which is what agnticr uses — runs under different terms: OpenAI, Google and Anthropic contractually commit not to train on it.

And the portable version of this objection, useful whatever you buy: ask any AI vendor where data is stored at rest, whether it's ever used for training, and what is logged. A vendor who can't answer those three crisply has answered a fourth question.

Of course it didn't — a chat window is a tool that waits for you. The work still needed someone to remember it, prompt it, paste the result somewhere, and do it all again next week. Adoption dies in exactly that gap, and it isn't your team's fault.

agnticr inverts the direction: jobs run unattended, on schedule, server-side — and the only thing that reaches a human is a decision that genuinely needs one, on WhatsApp, web or a phone call. There is nothing to remember to use. That's also why the chatbots you already have aren't wasted: plenty of our users keep them for personal work and connect them to agnticr for the work the company depends on.

There is no workflow builder to learn, no prompts to engineer, no integration project. You describe how you work today — in plain words, badly phrased is fine — and Agnes asks the questions and drafts the job. What comes back is a proposal you read, change, or throw away; nothing runs until you say so.

The smallest businesses in the private beta are one-person consultancies. The skill ceiling, genuinely, is “can you brief a colleague?” — and one-person firms are often the ones who feel the four lost hours a week most, because there's nobody else to lose them to.

Neither do we — pilot fatigue is entirely rational. Most AI initiatives die in the gap between the kickoff workshop and the first thing that actually runs, and everyone who has sat through one knows it. So we treat time-to-agent-value — the gap between describing a job and the first run that did real work — as the metric the whole product is built around.

There is no project phase to survive: no workflow to build, no integration program, no prompt engineering. You describe the job, read the plan, and the first gated run typically lands within hours. Prerequisites are named up front — if a system isn't connected yet, the plan says so before the first run rather than failing halfway through it.

And the reason day one is safe enough to touch real work is the same gate everything else passes through: nothing irreversible happens without a human. Most vendors need you to trust the AI before it may do anything real. agnticr inverts that — trust is earned during the first runs, not demanded before them.

Agreed — per-token invoices nobody can predict are a real problem, and “contact sales” pricing is worse. agnticr's model is a monthly budget you set — €10 or €200, your call — with a hard cap that cannot be crossed, and an itemized receipt on every single run.

That last part changes the conversation more than the cap does: when a run that saved three hours of coordination shows up as €0.40, you stop asking “what does AI cost?” and start weighing cost against value per job, continuously — the same way you'd evaluate anyone who works for you.

The models will keep changing — faster than any of us can track, and that's precisely an argument for not welding your business to one of them. agnticr is model-agnostic by design and deliberately runs on a mix: frontier models where judgment is needed, open-weight models where volume is, re-tuned as the market moves. You never pick a model, learn a model name, or migrate anything.

And the part of the system that doesn't churn is the part you accumulate: your jobs, your plans, your graded learnings, your records. Those are yours, in writing, and they get more valuable with every run — whichever model happens to be doing the typing that month.

The honest answer for most of the industry: unclear, and that should worry you. Our answer is that accountability is a paperwork property, not a personality trait — you can only hold someone to account if there's a record of what they did.

• Every plan, decision, approval and result is persisted — for every task and every job ever performed.
• Consequential calls pass through gates, so a named human decision is on the record exactly where it should be.
• Every run carries its own itemized cost, so “what did the AI do and what did it cost us?” has a literal answer.

That's the design conviction the whole product hangs on: AI can be held to account for business work only if the record exists. It's why agnticr is built around plans, gates and audit trails rather than around a chat box — and why “delegate the work, keep the decisions” is an architecture, not a slogan.