Approval gate and audit trail for AI agents · free beta, no card
How it works Platform Beta & pilots Developers Gap Score EU AI Act Sign in Create account
Approval gate for AI agents · supports EU AI Act oversight duties

Your AI agents propose.
A person decides.

VINCHY sits between your AI agents and the real world. Outgoing messages, payments and deletions your agents send through VINCHY wait for an authorised person to approve them, and every decision lands in a signed, tamper-evident audit trail you can show a customer or an auditor. Works with Zapier, n8n and anything that can call an API.

Open beta · Database in Frankfurt · AI on Mistral EU · Human approval · Tamper-evident audit
CSV · API and workflow integrations · Claude/MCP connector in private Test preview
Approval queue · illustrative
Waiting for a person3
Decided today7
Audit chainVerified
Pending decisions
Email to a customer — order confirmationMESSAGE
Pay a supplier invoicePAYMENT
Delete 120 inactive contactsDELETION
Signed record

Email to a customer — approved

Approved by M. Example (demo) at 09:41. Signed with Ed25519 and hash-chained to the previous record.

APPROVAL_GRANTEDEd25519Hash chain

Illustrative example with fictional actions and a fictional approver — not customer data.

One daily focusThe actions most likely to move revenue
Risk before lossSLA, inactivity and pipeline warnings
Recovery built inLost-deal cohorts, playbooks and attribution
Decisions and outcomesApproval, execution status and signed evidence
v1.0 beta · Pilot ready

Agent work, with a clear decision trail.

Follow daily priorities, review agent requests and track execution outcomes. The private connector preview also lets selected Claude/MCP clients read Test context and submit requests for human review.

01 / OPERATE

One gate for every agent action

Lead follow-ups, onboarding, renewals and recovery outreach run through the same gate: the agent proposes, an authorised person approves, the outcome is recorded.

02 / GUIDE

Ask and Voice know the workspace

Ask VINCHY and Voice explain live priorities, navigate the product and retain daily context — while protected decisions remain read-only. Voice listens and answers in seven EU languages — English, German, French, Italian, Spanish, Portuguese and Dutch — and every word is processed in the EU.

03 / COMMUNICATE

Email enters the same workflow

Inbound replies become visible to the owner. First-contact delivery is approval-bound, recipient-bound and written to the audit trail.

04 / PROVE

Privacy and reliability evidence

Retention, GDPR requests, production incidents, corrective actions and release evidence stay reviewable without silently changing live work.

The revenue leak

Revenue rarely disappears in one dramatic moment. It leaks through missed next actions.

A lead waits too long. A deal goes quiet. An owner misses an SLA. A lost opportunity is never revisited. The data exists — but it is scattered across inboxes, spreadsheets and CRM views.

VINCHY continuously turns those signals into a prioritized revenue queue: what needs attention now, who owns it, what the next action should be and what value is at stake.

AI helps your team move faster, but it never becomes an invisible operator. Sensitive actions can wait for approval, every decision is traceable and the audit chain makes later changes detectable.

From data to decision

One operating system from first signal to renewal and expansion

VINCHY combines acquisition attribution, CSV onboarding, activation, ownership, SLA monitoring, pipeline execution, pilot conversion, onboarding, customer health, renewal, expansion, campaign learning and lost-deal recovery in one workspace. It does not replace your CRM — it tells your team where to focus and adds a governed action layer above the tools you already use.

Revenue operating system

From first signal to recovered revenue

Not another dashboard to check. A working queue that shows what deserves attention and turns insight into an accountable next action.

01 / FOCUS

Know what to do today

The Today list brings together pending approvals, leads needing a response and agents without a confirmed outcome, with a reason and a direct path to each item.

02 / RISK

See risk before it becomes loss

Pipeline Risk Radar and SLA alerts surface stalled deals, overdue ownership and missing follow-ups.

03 / RECOVER

Bring lost deals back

Recovery cohorts, scenario value, outreach drafts and playbook intelligence turn closed-lost data into a repeatable motion.

04 / EXECUTE

Move from insight to action

Next actions, task inbox, calendar and team queue views keep ownership visible from recommendation to completion.

05 / PROVE

Measure what changed

Forecasting, attribution and executive briefs connect daily work to pipeline and recovered value.

The complete live platform

Where agents work in VINCHY today.

In each area the agent prepares, a person decides on anything that leaves the system, and the result is recorded. VINCHY does not promise revenue — it makes agent actions controllable and provable.

v1.0 beta · live in production
SignalPriorityHuman actionLearningProof
01 / ACQUIRELIVE

Acquisition & safe onboarding

Bring leads in with CSV preflight, column mapping, lawful-basis confirmation, duplicate review, human routing and import history. Preserve source, campaign and landing-page attribution from the first signal.

CSV PREFLIGHTROUTINGATTRIBUTIONIMPORT HISTORY
02 / ACTIVATELIVE

Activation intelligence

Track first-value milestones, cohorts, goals, bottlenecks, alerts, interventions, progress history and velocity benchmarks — using observed evidence, not invented telemetry.

COHORTSGOALSBOTTLENECKSVELOCITY
03 / SELLLIVE

Sales follow-up

Lead Command Center, ownership and SLA, activity timeline, next actions, Daily Focus, task inbox, calendar, queue filters, saved views and team workload — each next action has an owner; outbound steps go through the gate.

LEAD COMMANDDAILY FOCUSTASKSSLA
04 / CONVERT & ONBOARDLIVE

Pilot-to-customer conversion

Move a qualified pilot through Calendly attribution, follow-up readiness, close plan, proposal, human approval, customer decision, onboarding handoff, progress and first-value evidence.

PILOTPROPOSALDECISIONONBOARDING
05 / RETAIN & EXPANDLIVE

Customer success & expansion

Turn recorded customer health, success checkpoints and renewal dates into a human-owned action queue, retention forecast, expansion readiness, opportunity plans, pipeline and decision history.

HEALTHRENEWALEXPANSIONACTION QUEUE
06 / RECOVERLIVE

Lost-deal follow-up

Find pipeline risk, classify losses, rank rescue work, compare cohorts and playbooks and model evidence-backed scenarios. Rescue outreach is drafted by the agent and sent only after approval.

RISK RADARLOSS INTELLIGENCEPLAYBOOKSATTRIBUTION
07 / OPTIMIZELIVE

Campaign records

Spend, pipeline and observed results side by side, with budget pacing, alerts, a decision journal, review queue, impact timeline and experiment portfolio — a record of what happened, no ROI promise.

ROIPACINGEXPERIMENTSGOVERNANCE
08 / GOVERN & PROVELIVE

Control, reliability & privacy proof

Human approvals and signed audit now sit beside production journey checks, incident timelines, postmortems, corrective actions, management reviews, governance trends, coverage gaps, GDPR operations and a checksum-protected Reliability Audit Pack.

APPROVALSINCIDENTSGOVERNANCEAUDIT PACK
What we stand for

No black box. No silent actions.

No black box. Every agent action is recorded, signed and explainable — to you, your team, or a regulator.

No silent actions. Anything risky waits for a human. Always. Trust can tighten the gate — never loosen it.

No blind trust. Verify the audit chain yourself, against a public copy we cannot rewrite. Trust the math, not us.

No lock-in. Your agents stay in your tools. VINCHY - MAAM is the layer above them, not another builder.

Control is not a feature we added. It's the reason VINCHY exists.

How it works

Three steps to control

01

Connect

Connect your existing workflows through the API or SDK and assign each agent an accountable owner. Selected Claude/MCP clients can also join the private Test preview to read workspace context and propose actions. External agents are governed when their actions pass through VINCHY.

02

Govern

Set allowed actions, trust levels and policies. Requests that need a human wait for Approve or Reject; unanswered requests expire. The agent cannot approve its own request. In the connector Test preview, an approval runs a simulation instead of delivering the requested action.

03

Prove

Follow the request, human decision and execution outcome in the signed audit trail. Approval gives permission; an execution receipt records the reported result. Missing receipts remain visible as outcome unknown. Verify the hash chain, signatures and available public anchors, or export evidence for offline review.

See it yourself

Tamper-evidence, demonstrated

Verify the audit chain in your own account, then simulate an edit and watch verification fail from that record onward — proof you can't fake the trail.

Illustrative sequence — this is how the product behaves; the amount and record id are simulated.

Built for action and accountability

Revenue intelligence without surrendering control

Lead Command Center

Intake, ownership, SLA, activity history and next action in one operational view.

Revenue Intelligence

Pipeline risk, forecast scenarios, queue filters and saved team views that keep attention on value.

Recovery System

Loss intelligence, recovery cohorts, playbooks, outreach drafts and attribution in one closed loop.

Sales Copilot

Clear next-step recommendations, daily focus and an executive brief grounded in observed pipeline data.

Campaign Command Center

Observed ROI, budget pacing, alerts, decision learning, experiments and executive reporting — with every optimization kept human-controlled.

Activation Center

First-value milestones, cohort timing, success goals, bottlenecks and intervention priorities from observed product evidence.

Acquisition & CSV onboarding

Safe preflight, duplicates, routing, import history and attribution bring pipeline data in without losing accountability.

Pilot-to-customer

Booking attribution, close plan, proposal, decision and onboarding handoff keep conversion evidence and human ownership connected.

Customer Success & Expansion

Health, renewal and expansion queues turn recorded customer evidence into accountable retention and growth decisions.

GDPR Operations

Identity, SLA, ownership, fulfillment, closure, response pack and delivery evidence in one controlled request lifecycle.

Reliability Governance & Audit Pack

Production checks, incident lifecycle, corrective actions, management decisions, coverage gaps and a local PII-free evidence pack protected by SHA-256.

Claude/MCP connector · private preview

Selected clients can read Test workspace context, list pending approvals, submit requests and check their status. Access uses scoped agent keys. Live action execution through this connector is not available in the preview.

Separate Test and Live views

Review Test records separately from Live work. Approved requests from the connector Test preview simulate the action; they do not send its email, SMS or GitHub change. Approval notifications may still reach the owner.

Human approval

Review context and justification, then approve or reject. Unanswered requests expire. Approval and execution status remain separate, so permission is never mistaken for a completed action.

Provable audit

Hash-chained, Ed25519-signed records distinguish owner notifications, decisions and execution outcomes. Verify signatures and public anchor coverage, and export evidence for offline review.

Policy & guardrails

Named owners, scoped keys, trust levels, reversibility rules and prompt-injection screening.

Ask VINCHY

Ask about agents, pending approvals, leads and priorities, or hold the orb and talk — Voice works in English, German, French, Italian, Spanish, Portuguese and Dutch, processed in the EU. Built-in answers cover common workspace questions even when the AI service is unavailable. Protected decisions stay with you.

Reliability Center

Daily service checks, delivery retry, backup verification and PII-free alerts when something needs attention.

The difference

Running agents with VINCHY - MAAM — and without

Same agents, same tools. The difference is what you can see, stop and prove when it matters.

Without VINCHY

  • Agents act on their own; you find out afterwards — if at all.
  • Logs are scattered across tools, editable and easy to lose.
  • "Who approved this?" has no provable answer.
  • An audit or customer question means manual reconstruction across systems.
  • API keys with broad access and no per-agent limits.

With VINCHY

  • Risky actions wait at your approval gate before they run.
  • One append-only, Ed25519-signed audit trail — any edit is detectable.
  • Every agent has a named owner; every approval records who and when.
  • Gap report, Trust report and audit timeline — exported in one click.
  • Scoped keys and rate limits per agent — plus guardrails on every action.
Who it's for

Home or Business

Home

For your personal AI agents
  • Control and audit your own agents — your household, your rules.
  • Exempt from EU AI Act deployer obligations (Art. 2(10)) — voluntary control posture.
  • Free to start. Connect an agent and see the audit trail today.

Business

For companies running AI agents (EU AI Act deployer)
  • Team accounts with owner / admin / member roles and per-agent accountability.
  • EU AI Act Art. 26 framing, content moderation pre-screen, gap + Trust reports.
  • Documentation and records designed to support an audit or enterprise review.
Start with a template

Agents you can put under control

Don't know where to start? Pick a ready-made agent for Home or Business — or describe your own. VINCHY - MAAM gates the risky actions either way.

Bill & Subscription Monitor Home

Watches bills and subscriptions, flags new or rising charges. Every payment or cancellation waits for your OK.

Invoice Approver Business

Matches purchase orders to invoices and proposes payment. Releasing a payment waits for an approver.

Grocery & Meal Planner Home

Plans meals and builds your shopping list. Checkout waits for your approval.

Lead Qualifier Business

Scores and routes inbound leads. Messaging a new prospect waits for you.

Travel Booker Home

Finds flights and hotels to your taste. Booking with payment waits for you.

Support Resolver Business

Drafts answers and resolves tickets. A refund or policy exception is held for review.

Health Scheduler Home

Manages appointments and reminders. Confirming a booking waits for your OK.

Contract Reviewer Business

Reviews and redlines agreements. Sending a document to an outside party waits for approval.

Home Maintenance Tracker Home

Tracks repairs and upkeep. Hiring a handyman waits for your approval.

Onboarding Agent Business

Runs new-hire setup tasks. Granting system access waits for a human.

Deal & Price Hunter Home

Tracks prices and hunts deals. Ordering in your name waits for you.

Social Publisher Business

Drafts and schedules content. Publishing to your company channels waits for approval.

Every template ships with a safe default trust level and the right gates — you tune it, then it runs.

New — Starter Pack

Four working agents. One click. Every action gated.

"Install the team" sets up four ready-made business agents in your workspace. They draft — you approve. Try them on demo data first, then connect your real leads via CSV import or the included n8n recipes.

Lead Reactivation Business

Drafts SMS to leads that went quiet — with built-in triage that skips opted-out contacts. Nothing sends without your approval.

Review & Referral Business

Asks happy customers for reviews and referrals. Every message waits for your OK before it goes out.

Lead Nurture Business

Keeps new prospects warm with relevant follow-ups. Sending always waits for you.

Receptionist Business

Proposes appointment slots and prepares bookings (e.g. Google Calendar). Nothing is confirmed until you approve.

Each agent ships with eval-tested triage, guardrail layers and an n8n recipe to connect your own tools (e.g. Twilio, Google Calendar, Slack).

Access

Free during the open beta. Business pilots by arrangement.

There are no public prices yet. During the open beta, Home and Business accounts are free — no card, no automatic billing. For a Business pilot we agree scope and terms with your team first, in writing.

What the labels on this page mean
Open betaHome and Business accounts are free to use today; no card, no automatic billing.
Controlled pilotBusiness pilots with our team, by request — limited seats, formal legal review and DPA before paid rollout.
LiveA feature you can use in the app now.
Developer previewInterfaces still changing (the Developers page); not for production integrations yet.
Open beta: free, no card, no automatic billing. Any paid terms are agreed in writing before a pilot goes live.
Home
Free in the open beta

For trying governed personal agents without a payment commitment.

  • Personal workspace
  • Human approval controls
  • Tamper-evident activity history
Start free
Business
Pilot by arrangement

For companies that run AI agents and must be able to show who approved what. Free in the open beta; a pilot is scoped with you.

  • Approval gate for risky agent actions
  • Signed, tamper-evident audit trail
  • Team roles and a named owner per agent
Start free beta

Not sure where to start? Begin with one governed workflow.

In a focused 20-minute call we pick one agent workflow, decide which actions need a human approval and define the proof VINCHY should produce. Scope and any terms are agreed before the pilot starts.

EU AI Act

Designed around deployer duties

VINCHY - MAAM maps directly to the obligations that fall on whoever runs an AI agent — helping you meet them, not certifying that you have:

Art. 9
Risk management — every action that reaches the gate is classed by reversibility; irreversible ones always require a human.
Art. 12
Record-keeping — automatic, tamper-evident logs, retained six months.
Art. 13
Transparency — the model behind each action is recorded.
Art. 14
Human oversight — trust levels, an approval throttle and confidence routing keep oversight meaningful, not nominal.
Art. 26
Deployer duties — a person in the loop for risky actions, plus the records to prove it.
Informational — not legal advice. VINCHY supports documentation duties; it is not a certification of compliance.
Read the full Article 26 breakdown →
FAQ

Questions

Do I need to rebuild my agents?

No. Keep your agents in their existing tools and route the actions you want governed through the VINCHY API or SDK. The separate Claude/MCP connector is a private preview for selected clients in the Test workspace; it can read context and propose requests, but cannot execute Live actions.

Does VINCHY make us EU AI Act compliant?

No — no tool does that for you. Article 26 applies to deployers of high-risk AI systems. For them, VINCHY provides the approvals and logs it requires: human oversight through approvals by identified people with the authority to decide, and automatically recorded logs you keep. VINCHY also adds the Article 50 label to messages your agents send. Whether and how the AI Act applies to you, and your documentation, stay your responsibility. Not a certification, not legal advice.

Does every appointment reminder need its own approval?

No. When an appointment is booked, VINCHY prepares the reminder plan (confirmation and reminders). A person approves that plan once; the reminders then go out automatically at their scheduled times, each labelled as automatically generated by an AI system (Article 50).

Does VINCHY control everything my automation does?

Only what goes through VINCHY. Your agent or workflow (Zapier, n8n, your own code) has to send the action to VINCHY and wait for the decision. Steps a flow carries out directly — without asking VINCHY — are outside the gate: VINCHY cannot stop them and they do not appear in the audit trail.

Where is my data?

Database and server functions in Frankfurt, AI on Mistral’s EU endpoint. Static pages come from the nearest edge; email delivery (Resend) stores message content and logs in the USA, and SMS (Twilio) is processed in the USA — every provider, its location and the transfer basis are on the Sub-processors page. The audit trail stores action metadata and cryptographic hashes — not raw payloads where avoidable. You can export a signed CSV/JSON envelope and verify it offline.

What's the difference between Home and Business?

Home is for personal agents (Art. 2(10) exempt) and is free to start. Business is for companies acting as a deployer — team roles, Art. 26 framing, moderation, and compliance reports.

How is VINCHY different from orchestration tools like Trigger.dev or Temporal?

Orchestration tools like Trigger.dev or Temporal help engineers build and run agents in code. VINCHY sits one layer up: it governs the agents you've already deployed — human approval gates, a tamper-evident audit trail, and EU AI Act Art. 26 oversight — built for the people accountable for the agents, not the ones writing them. No custom code: one HTTP step in Zapier or n8n, or one API call from your own agent.

Isn't this just another dashboard?

A dashboard tells you what already happened. VINCHY sits in the path of the action instead: risky steps stop and wait for a decision, and the decision you make is written into a record you can hand over later. The numbers on screen are a by-product — the point is being able to step in before an action runs, not read about it afterwards.

Does an approval mean the action was completed?

No. Approval, release to an executor and an execution receipt are separate steps. VINCHY shows the reported outcome; if no receipt arrives within the reporting window, the outcome is unknown. An owner notification only confirms the approval workflow sent a notification, not that the requested action was delivered.

What happens when I test the Claude/MCP connector?

The private preview is limited to selected clients and Test-bound agent keys. A human can approve or reject a request; unanswered requests expire. Approval simulates the requested action without calling its email, SMS or GitHub provider. Gate notifications to the owner may still be delivered, and the audit identifies the simulation as Test activity.

Let your agents propose. Keep the decision with a person.

Connect one agent or one Zapier or n8n flow, choose what needs approval, and every decision is signed into your audit trail.

Start free beta