Trust & security
Autonomy you control
MindX acts only inside the rules you set. Every action is checked before it happens, verified after, and logged so you can see exactly what was done and why.
How MindX decides what it can do
| Level | What MindX does | Example |
|---|---|---|
| ObserveLevel 1 of 6 | Spots something | Where-is-my-order tickets jumped 30% |
| RecommendLevel 2 of 6 | Suggests an action | "Send delay notices to affected customers" |
| DraftLevel 3 of 6 | Writes the reply or action for you | A reply waiting for your click |
| Act on safe requestsLevel 4 of 6 | Handles low-risk requests on its own | Sends tracking updates |
| Act within your limitsLevel 5 of 6 | Handles money or order changes under your rules | Refunds under $50 on unopened items |
| Run full workflowsLevel 6 of 6 | Resolves a problem across steps | Late order → notify → reship → follow up |
Observe
What MindX does: Spots something
Example: Where-is-my-order tickets jumped 30%
Recommend
What MindX does: Suggests an action
Example: "Send delay notices to affected customers"
Draft
What MindX does: Writes the reply or action for you
Example: A reply waiting for your click
Act on safe requests
What MindX does: Handles low-risk requests on its own
Example: Sends tracking updates
Act within your limits
What MindX does: Handles money or order changes under your rules
Example: Refunds under $50 on unopened items
Run full workflows
What MindX does: Resolves a problem across steps
Example: Late order → notify → reship → follow up
You choose the level for each request type, and can change it anytime.
Six safeguards
Rules in code, not prompts
Your limits are enforced by software, not by asking the AI nicely.
Check before acting
Every money or order change is checked against your policy and fresh data first.
Verify after acting
MindX confirms the change actually happened in Shopify.
Human approval for risk
Anything outside your rules, or uncertain, goes to a person with full context.
Complete audit log
Every action records the reason, the evidence, the rule that allowed it and the result.
Kill switch
Pause any worker instantly from one button.
When MindX isn't sure, it stops
- It can't identify the customer: it asks, never guesses
- A system is down: it doesn't invent the answer
- Two systems disagree: it flags the conflict
- Your policy is unclear: it asks for approval
- An action only half-completes: it records it and fixes it, or escalates
Your data
- You own your data. We use it to run MindX for you.
- Least access. We request only the Shopify and helpdesk permissions each feature needs. The Brain Scan is read-only.
- Isolation. Each merchant's data is kept separate from every other merchant's.
- Encryption. Data is encrypted in transit and at rest. [Confirm with engineering.]
- Learning across stores. MindX improves from anonymized patterns across merchants, never by sharing your customers' personal data with anyone. You can opt out. [Legal to confirm wording.]
- AI providers. We use leading model providers under agreements that don't allow them to train on your data. [List providers on /subprocessors.]
- Deletion. Disconnect anytime; we delete your data within [30] days on request.
Compliance status
SOC 2 Type I: [in progress, expected date]. GDPR and CCPA: data processing agreement available. [Show only what is true at launch; no badge until earned.]
Have a security questionnaire?
Send it to security@themindx.ai and we'll reply within 2 business days.