Agent Safety
Last updated: October 2026
AI agents built by other companies have already done things nobody asked for. Here is what has happened, without naming anyone, how Memriq handles each case today, and what we are still building.
Our approach
You decide how much a Memriq agent may do for you. We do not decide that for you, and we do not take a level away to protect you from it.
Every level says, in plain words, what the agent does at that level and what can go wrong. The default is a safer level — never the setting that spends your money or acts in a way that cannot be undone. The higher the level, the heavier the approval to turn it on: a yes to each action, a limit you set, a phrase you type, or signing in again.
The level is checked again at the moment the agent acts, not when the job was set up, so lowering it stops work already under way.
Live Live today in your Memriq account's agent levels for Dwell, Ease, Aegis and Revel, and in Drift's own booking levels, which run from Compare (the default — Drift finds options and you book) to booking within limits you set.
What has gone wrong, and how we handle it
Each row is something an AI agent has done. Beside it is what Memriq does about it today, and what we are still building. We only call something live when it is running for people now.
How Memriq handles it: In Harbor, before anything is passed on for deeper research, Harbor checks it against your own settings, holds back what you have not allowed, and shows you what it held back.
Being built: In Drift, a reply to a booking company never carries your home address; if a company asks for it, Drift asks you instead.
How Memriq handles it: Limits you set are checked at the moment the agent acts. In Drift, the highest booking level books only refundable items that fit the trip budget you set; anything over it comes back to you, and with no budget set it books nothing on its own.
How Memriq handles it: In Drift, looking up a booking's change or cancellation terms never changes the booking. Drift shows the terms and what it would cost; nothing is changed or cancelled with the company without your approval, and a cancellation is not counted as done until the company itself confirms it.
How Memriq handles it: Drift books only at the level you chose. At the default it compares options and you book; at the next level it fills everything in and stops at the pay button for you.
Being built: Drift showing the fee, deposit and no-show lines from the booking company's own page, word for word, before anything is committed.
Being built: Drift watching a booking window and, when it opens, filling the form at a measured pace — a limit on how many forms it fills on one site at a time, a few spaced-out checks if a date is not open yet, and any CAPTCHA or texted code left to you.
How Memriq handles it: At the default setting, Ease and Aegis only prepare a letter or a request, and you send it yourself. Letting the app send for you is a higher setting you choose, and even then each message needs your yes.
Being built: Drift drafting replies to the companies you book with, showing each draft first, and sending only what you approve — or opening it ready-filled in your own email for you to send.
How Memriq handles it: Only Harbor connects to your email account and your online files, and it only reads your mailbox — it never sends from it. The other Memriq apps read through Harbor, and Harbor logs which app read what, and when. Disconnect a source in Harbor and Memriq deletes the access it stored and stops new reads. Your captures, documents and notes in Harbor and your to-dos in Helm are encrypted with a key of your account's own. You can close your account in Drift, Harbor, Helm and other Memriq apps and delete what that app holds for you.
Being built: Disconnecting your email in Harbor also withdrawing the permission at your email provider (today you remove it in that provider's own settings), and the rest of what Harbor works out from your projects encrypted under your account's key.
How Memriq handles it: In Helm, the text of an email or a document reaches the assistant only inside a marked block, with a standing rule that it is information to read and never an instruction. Only you direct the agent.
Being built: The same rule in every Memriq app that reads your mail, and Drift pointing out any email that tries to tell it what to do.
How Memriq handles it: You keep ownership of what you put into a Memriq app. Memriq takes only a limited licence to process it so the app can work for you, and does not sell your data or share it for advertising.
How Memriq handles it: In Helm, when the agent is working on a to-do you can see its state — still reading, waiting on your answer or your pick, or stopped. If it stalls or fails, Helm says so, tells you whether anything was charged, and lets you start it again.
Being built: The same in Drift: a waiting task shows what it is waiting on, and a missed or failed step tells you and says what to do.
How Memriq handles it: When Helm's agent is working for you, you can press Stop from any device: the run ends and sends nothing. In Topsway, a Pause button on your Today page stops its work for you until you resume.
Being built: A Stop that works from any device for every Memriq agent. Not every app has one yet, so we do not claim it for all of them.
Why a travel agent is not a chat window
A general chat app answers what you type. Drift, Memriq's trip planner, works on your actual bookings, so it is built to know the difference between looking something up and doing something you cannot take back. In Drift today:
- Four booking levels, each with its risks and what to check, chosen by you per trip — and the level read again at the moment Drift acts.
- Change and cancellation terms read before anything is touched, and a cancellation not counted as done until the company confirms it.
- Booking confirmations read from the email you connect through Harbor, read-only, and kept with your trip's bookings.
Being built in Drift:
- Watching for a booking window to open and filling in the booking for you at that minute, stopping at the pay button so you review and pay.
- Watching for an operator's reply, pulling out the price and terms, drafting your answer, and asking each traveller privately for anything still needed — sent only when you approve it.
- Checking the times and place a booking site actually used against what you asked for, and telling you if the site changed them, before showing you a price.
- Pricing a rental car's return at the time you chose and a little earlier or later, so you can see when moving it changes the total, using the prices the site actually shows.
Your privacy
Two promises we make. The first was made for Helm, where it is in place today:
No one but you can read what you keep in Helm — your account holds the only key.
Even our agents work with agent-client privilege: whatever you tell them or share with them stays between you and them.
By “our agents” we mean Memriq's service and the AI models it uses to do the work — both are inside that privilege. What the privilege covers.
- What you keep in Helm, and your captures, documents and notes in Harbor, are sealed with a key of your account's own. Memriq's service opens it only within your own sign-in — to do what you ask, and to make a copy with names, addresses, numbers and handles taken out, which is what runs when you are not there.
- The email address and name on your Memriq sign-in are stored encrypted, and your account can still be found by your exact email when you sign in.
- Only Harbor asks for access to your email account and your online files. Every other Memriq app gets what it needs through Harbor.
Being built:
- What agents learn across many people shared only with names, numbers and addresses taken out, and only once many people stand behind it.
- Your reports in Drift shared with other travellers, without your name, only if you turn sharing on.
- A sensitive detail an operator needs, such as a passenger's weight for a small plane, asked of that traveller privately, encrypted under their own key, and sent only in the reply you approve.
More: Your data and the full Privacy Policy. The plain-English terms are in the Terms of Service.