Permissions, not blanket access
A business handing Nuncily a process is handing it real customer data. That trust is structural, not a policy document — it's built into how the product is permitted to act.
- 14:02:11Readbank_statement_q2.pdf
- 14:02:14Flagged11 days missing from statement
- 14:03:40Sentfollow-up request to client
- 16:47:02Receivedupdated statement.pdf
- 16:47:19Verifiedstatement complete for Q2
- 16:47:20Updatedpractice management record
- Scoped permissions
- Nuncily only acts within permissions granted explicitly, system by system and action by action. It isn't given broad platform access to figure out on its own what it needs.
- An audit trail
- Every action is logged: what was read, what was changed, and when. If a process needs to be reconstructed after the fact, the record is there.
- Verification before completion
- An outcome is checked against what the process actually requires before it's marked done. Nuncily verifies its own work rather than assuming a completed step was a correct one.
- Escalation, not guessing
- Anything outside its permitted actions, or anything genuinely ambiguous, goes to a person instead of being assumed. The person who picks it up sees the full conversation, not a summary.
Approval, where a process requires it
Some actions shouldn't be taken without a person's sign-off, regardless of how routine the rest of the process is. Where a step needs that approval, Nuncily waits for it rather than proceeding on its own judgment.
Your clients' data stays protected, and stays yours.
Hosted on AWS
Stored and processed on Amazon Web Services, in the London region.
Encrypted throughout
In transit and at rest, for every file and the database behind them.
Never used to train AI
Our AI runs on Amazon Bedrock in London. Your data isn't shared with any model provider.
Not kept by the AI
Documents and messages aren't stored by the AI service once a request is processed.
GDPR as standard
Handled under UK GDPR and the Data Protection Act 2018, with your firm as controller.
Yours to take back
You own your data. When you leave, export it, and we delete it within 30 days.
Common questions
What access does Nuncily need to a connected system?
Only what the specific process requires. Access is granted per system and per action — read-only where that's sufficient, write access only where the process needs to change something. Nuncily is not given broad platform access.
What happens when Nuncily encounters something it can't handle?
It escalates to a person rather than guessing. The person picking it up receives the full conversation and everything collected so far, not a summary.
Is there a record of what Nuncily did?
Yes. Every action is logged — what was read, what was changed, and when — so a process can be reconstructed after the fact.
Can a step require human approval before it proceeds?
Yes. Where a process requires sign-off, Nuncily waits for it rather than proceeding on its own judgment.
Questions about a specific process or system?
Security review, data residency, DPA — send the questions over and a person answers them. We'll walk through what Nuncily would and wouldn't be permitted to do in your setup.
Loading available times…
Open the calendar in a new tab- A conversation about your process, not a slide deck.
- 30 minutes. We'll show the loop running on a process shaped like yours.
- No obligation, and your details stay with us.