Otto asks first. You set the rules.
Out of the box, nothing Otto writes goes to a customer until someone on your team says yes. Here is how that works, where your data lives, who can see it, and what we don't offer yet.
What may Otto do without asking?
Applies to everyone in Blue Ridge Plumbing & Air, a sample business.
This is where every workspace starts. Otto can tidy records on his own, and anything that goes to a customer waits for a yes.
Send Basil Kakis the boiler quote, agreement and $4,500 deposit link?
Boiler quote, agreement and $4,500 deposit link sent to Basil Kakis, 9:48 AM.
In Full access, nothing waits for a yes. It is still in the audit log.
How Otto is controlled, in plain words.
Four controls work together: a yes before sends, a mode you choose, a written record of everything, and Undo for the changes he made.
Sends wait for a yes.
Replies, texts, quotes, e-sign requests, bookings and campaign emails are all marked as things that can't be taken back. In the default mode, every one of them waits in your Approvals inbox.
- The check runs on our servers, not inside the AI.
- Otto can't approve his own work. An approval needs a one-time key that is made only when a person clicks Approve.
- If the check fails for any reason, the action is blocked.
Send the boiler quote, agreement and deposit linkBasil Kakis. $14,997, written from your price listApproved by Mike
Book Luis for Thursday 8 to 10 and text herDana Whitfield. Booking and a text to a customerApproved by Mike
Send 3 payment remindersCalvin Price. $1,840 overdue, 3 customersApproved by Mike
You choose how much he does alone.
Pick one of three modes for the whole workspace. You can also let Otto always do one kind of task without asking. That never applies to deletes or other destructive actions.
Anyone on your team who isn't a guest can change the mode, so add people with care.
| Ask for approval | Approve for meDefault | Full access | |
|---|---|---|---|
| Look things up | Runs | Runs | Runs |
| Edit records in your workspace | Asks | Runs, with Undo | Runs |
| Send a message, quote, booking or e-sign request | Asks | Asks | Runs without asking |
| Bulk changes and deletes | Asks | Asks | Runs without asking |
Ask for approval
- Look things upRuns
- Edit recordsAsks
- Send a message, quote, booking or e-sign requestAsks
- Bulk changes and deletesAsks
Approve for meDefault
- Look things upRuns
- Edit recordsRuns, with Undo
- Send a message, quote, booking or e-sign requestAsks
- Bulk changes and deletesAsks
Full accessUse with care
- Look things upRuns
- Edit recordsRuns
- Send a message, quote, booking or e-sign requestRuns without asking
- Bulk changes and deletesRuns without asking
Everything he does is written down.
The Agent audit log lists every action with the time, who did it and what happened. Each change to a record is marked as made by a person, by Otto, or by the system.
- Filter by all actions, failures, or changes.
- You choose who on your team can open the log.
- Otto
Wrote a reply to Priya Raman
Draft 
MikeApproved: quote to Basil Kakis
Sent- Otto
Added tankless install to Jose Ruiz
Edit - Otto
Answered Dana Whitfield, wrote down the system
Edit - System
Calendar sync with Google failed, retried
Failed - Otto
Looked up Karen Mitchell's past jobs
Read
Undo, and where it stops.
You can undo the changes Otto made in your workspace, newest first. Undo can't call back a message that has been sent or a payment that has been made. That's why sends wait for your yes.
- Merged two records for Jose RuizEdit, 9:16 AM
- Moved Dana Whitfield to ScheduledEdit, 9:15 AM
- Added a warranty date to Harbor View boilerEdit, 9:14 AM
- Text to Priya RamanSent after your yes, 9:12 AMSent messages stay sent
Otto can't move your money.
He can't charge a card, issue a refund or cancel a payment. He can edit the products and prices on your list, and that waits for a yes too.
What your customers see and hear.
Rules for calls and texts that protect your customers, and you.
- Calls say when they're recorded.
When call recording is on, the caller hears "This call may be recorded." You turn recording on or off for your business.
- Every text has a way out.
Texts end with "Reply STOP to opt out." and STOP is honored.
- Your texting is registered.
Business texting is registered with the US carriers, a step called A2P 10DLC. We fill it in from your business details.
- Callers can reach a person.
Otto passes a call to you or your team when you've set a transfer number. If you haven't, he offers a callback and leaves a summary for your team.
- You choose his greeting.
On calls, Otto introduces himself as your virtual receptionist. You can edit what he says first.
Hi, our kitchen sink is backing up and the disposal just hums. Can someone look at it this week?
Hi Priya, sorry about the sink. Luis can come Thursday 1 to 3. Want me to book it?Reply STOP to opt out.
Yes please
"This call may be recorded." Recording is on for this business.
Where your data lives.
In the United States. Here is each place, what it holds, and who runs it.
Ashburn, Virginia
Each business gets its own machine for Otto, with an encrypted disk. No other business shares it.
Blue Ridge
Another businessOhio, us-east-2
Customers, jobs, messages, files and settings.
Cards your customers pay with are handled by Stripe.
Sent with storage turned off. Some features, like the phone voice, use other AI providers.
Ashburn, Virginia
Written by our own transcription service, not sent out to be typed up.
Phone calls and texts are carried by Twilio. The full list of companies that process data for us is in our Privacy Policy.
Who can see it, and how you leave with it.
Who can see it
- People you add to your workspace. Guests can't change what Otto may do.
- Otto's machine belongs to your business alone.
- You choose who can open the Agent audit log.
- Our team looks inside your workspace only to help you, when you ask.
How you leave with it
- Export your contacts as a spreadsheet, and any table as CSV or Excel, whenever you like.
- Month to month. Cancel online, with no call.
What we don't offer yet.
If you need any of these, tell us before you sign up. We'd rather you know now than find out later.
- A SOC 2 report
We haven't had an outside SOC 2 audit. If a client or your insurer asks you for one from your software, we can't give it to you yet.
- A HIPAA business associate agreement
We don't sign BAAs today. If your practice needs one, don't keep patient health details in AI Scaling yet. Talk to us first.
- A public status page
There's no page that shows outages yet.
- A promise that AI providers keep nothing
Otto's requests to OpenAI go with storage turned off, but we don't have a zero data retention agreement, and some features use other AI providers.
- Undo for sent messages and payments
Once a text, email or payment goes out, it's out. That's why sends wait for your yes by default.
- Hosting outside the United States
All workspace data is hosted in the US.
Found a security problem? Tell us.
Thank you for looking out for our customers.
- Tell us what you found and how to see it.
- Please don't open, change or keep anyone else's data, or slow the service down while testing.
How to send a report
- Open the Talk to a person form on our Get started page.
- Start your message with "Security report".
- Say what you found, where it is, and the steps to see it.
Build a business that doesn't depend on you.
One system for the whole business, with Otto doing the busywork. You say yes.
