Control every action your AI agents take, and prove what happened.

AI agents now act for your business. Prompts and logs can't keep them in check.

Agents issue refunds, move money and change customer accounts. Instructions in a prompt can be ignored or overridden, and a log your own system writes proves little when something goes wrong. These incidents show what happens without controls.

• Agents act before anyone can stop them.

  In April 2026, an AI coding agent deleted a company's production database and its backups in nine seconds, without asking first. The outage lasted more than 30 hours.

  Source: ABC News (opens in a new tab)

• Support agents can be talked into anything.

  In 2026, attackers asked a major platform's AI support assistant to change the email on customer accounts, then took the accounts over. The assistant did not verify who was asking.

  Source: VentureBeat (opens in a new tab)

• Small actions add up fast.

  In 2026, a personal AI agent sent more than 500 messages to its user, his family and his contacts. At $250 a credit, a looping agent can give away $25,000 in a hundred actions.

  Source: Chris Boyd's blog (opens in a new tab)

The business remains accountable. In 2024, a Canadian tribunal held Air Canada liable for incorrect information its chatbot gave a customer. Source: Moffatt v. Air Canada, 2024 BCCRT 149 (opens in a new tab)

Tridris never stores card or bank details, and its records hold only fingerprints of amounts and customer details. To keep the credentials that move money in your own systems, use Decision-only mode: Tridris decides, and your own system carries out the action.

Check. Trace. Seal.

Every action your agents take passes through the same three steps, before, during and after it runs.

1. 01 · Check, before an action runs

   Limits that hold, whatever the agent was told.

   Every action is checked against the limits and budgets you set for that agent. It runs, waits for an authorized person, or is blocked, with the reason in plain words.

   Book a live demo

   • Per-action limits, daily budgets, per-customer and hourly limits for each agent
   • Run, hold for approval or block, decided before money moves or data changes
   • A malfunctioning or manipulated agent cannot talk its way past a limit
   • Runaway loops hit a limit within seconds, and every attempt is recorded

   

   

   Blocked80% discount · above the maximum

2. 02 · Trace, while an action runs

   Every action tied to an agent, a session and a person.

   Each action is linked to the agent that asked for it, the conversation it came from and the person who approved it. Approvers decide in the dashboard or from a link on their phone. Add a passkey, such as Face ID or a fingerprint, and the record proves exactly who approved.

   Book a live demo

   • Approvals from the dashboard or a phone, with optional passkeys that cannot be phished or replayed
   • Approvers see the reason an action was held and its risk signals
   • A full timeline for every action: requested, held, approved, completed
   • Reconciliation flags any action taken outside Tridris

   

   

   ApprovedJordan Lee · with a passkey

3. 03 · Seal, after an action completes

   A verifiable record of every action, including blocked ones.

   Each action is sealed into a verifiable record: signed by Tridris, countersigned and time-stamped by a separate sealing service with its own key, and linked to the record before it. Customers, auditors and partners can check it themselves, and any change to it is detected.

   Book a live demo

   • Countersigned by a separate sealing service, with its own key and log
   • Export an evidence package anyone can verify, without logging in
   • Amounts and customer details kept out of the record; it holds a secure fingerprint
   • Built on open standards your auditors already know

   

   

   VerifiedAll records passed verification

Built on open standards

• Ed25519

  Digital signatures · IETF RFC 8032

• JSON Canonicalization

  The same record always signs the same way · IETF RFC 8785

• SHA-256

  Fingerprints and the record chain · NIST

• Passkeys

  Optional, phishing-resistant approvals · W3C WebAuthn, FIDO2

• AAR

  Agent Action Receipt, the open record format designed by Tridris; specification on request

Wherever AI agents move money, change accounts or commit your business

• Available now

  E-commerce and retail

  Support agents that issue refunds, credits and discounts, cancel orders and update shipping details.

• Talk to us

  SaaS and subscriptions

  Agents that apply billing credits, change plans and restore account access.

• Talk to us

  Financial services and fintech

  Agents that initiate payouts, adjust fees and update customer details under strict controls.

• Talk to us

  Travel and hospitality

  Agents that rebook trips, waive fees and issue refunds and vouchers.

• Talk to us

  Insurance

  Agents that handle claims steps, payments and policy changes.

• Talk to us

  Marketplaces

  Agents that resolve disputes between buyers and sellers and release payouts.

Live today: AI customer support agents

The first agents Tridris governs are customer support agents for online stores, across six actions. The same Check, Trace and Seal applies to every action on this page; design partners help us choose which to add next.

• Refunds

  Per-refund limits, a shared daily budget and approval above your threshold.

• Store credit

  Small credits are counted together, so goodwill gestures cannot quietly add up.

• Order cancellations

  Orders already shipped cannot be cancelled; high-value cancellations wait for approval.

• Shipping address changes

  Changes to another region, or soon after an account's contact details changed, wait for approval.

• Account email changes

  Identity changes always need a business approver, with risk signals shown to them.

• Discount codes

  Small discounts go through; larger ones need approval; anything above your maximum is refused.

Using AI agents for other actions? Tell us which ones.

Start where you are comfortable

Choose how much Tridris does for you, and move to the next step when you are ready. Every step uses the limits and approvals you set for each agent.

• 1. Watch

  Give Tridris read-only access to your systems. See which of your agent's recent actions would have been held or blocked under your limits, and what they were worth. Nothing changes.

• 2. Decision only

  Your agent asks Tridris before each action. Cleared actions get a signed authorization, and your own system carries them out with your credentials. Tridris never holds credentials that move money, and every decision and result is sealed as a verifiable record.

• 3. Enforce

  Tridris checks each action, routes it for approval when needed and carries it out through your systems, so the agent never holds your credentials. Every step is sealed as a verifiable record.