The worry about AI at work isn’t that it will be useless. It’s that it will do something nobody approved. Widrow is built the other way round: a Digital Employee starts with nothing, and only ever does what your business has switched on. Here is every control, and where it lives.
Nothing is autonomous by default
A Digital Employee cannot use a tool it was not given, cannot read knowledge its role does not cover, and cannot spend past a budget you set. Every one of those is off until someone turns it on. Permission is granted, never assumed.
Roles decide the tools
Open a role and tick the tools, skills and connected apps it may use. Management, Staff and AP Clerk come built in, and you can define your own roles for the way your business actually works. A tool that is not ticked cannot be called — the check happens on our side, not in the conversation, so no instruction typed into a chat can widen it.
Tenant Portal → Workforce → Roles
Access levels decide the knowledge
Staff, Management and AP access are separate levels, and they decide which assistant a person gets as well as what it can read. A staff member’s assistant cannot reach management material, because it is a different assistant with a different knowledge tier. You also cannot remove the last admin, so nobody can lock the business out of its own platform.
WordPress → Digital Employees → User Access
Budgets decide the spend
Set a weekly budget for any person. When they reach it their assistant moves to a cheaper model and tells them why — it never goes silent mid-task. Everyone is unlimited until you choose to budget them, and you can see what each person has actually used.
Tenant Portal → Settings → Staff-AI Budgets
Every change is versioned and reversible
Settings do not go live as you type them. You publish them, and each publish is saved as a numbered version of the whole configuration. Compare any two to see exactly what changed, and roll back to an earlier one if a change did not do what you expected.
Tenant Portal → Settings → Config History
Nothing sends without a person
Email replies and new messages are written into your own Drafts folder for you to read, change and send. The assistant prepares the work; a human still presses the button.
Anything it cannot handle goes to a human
When a customer conversation needs a person it hands over rather than guessing, and the lead is captured on the way through so nobody falls off the end. The hand-off form is yours to customise. Questions it could not answer are collected, so they become the next thing written down.
You choose what it is allowed to know
Any page, post or product carries an Exclude from Digital Employee knowledge tick. Turn it on and the item stops being indexed, quoted or recommended — and for a shop, it can no longer be added to a cart in chat. The change takes effect as you save it.
Connections are visible and revocable
You choose which accounts and apps are connected, whether for one person or the whole business. Actions that delete or cancel something arrive switched off and stay off until you enable them. Use is logged, access is limited by role, and disconnecting removes it. Your portal sign-in is protected by two-factor authentication with recovery codes.
Tenant Portal → Workforce → Integrations
And when you are not sure, ask the page
Every settings panel carries an Ask about this page button. It opens the assistant, which explains what the page does in plain language — and can make the change for you, there and then, from the conversation. Sam does this inside your WordPress admin, Tess in your portal. It is the reason a business can run this without a systems administrator.
The short version
A Digital Employee can only use a tool a role was given, can only read the knowledge tier that role allows, spends inside a budget you set, and hands anything it is unsure about to a person. Every configuration change is versioned and reversible.
Read the DEF Constitution, version 1.0
Want to see what Widrow would do in your business? Ask Joe to set up your one-on-one evaluation.
More detail: everything Widrow does · how your data is handled · what it costs · questions people ask.