You stay in control of every app Knotwork touches.

You pick which programs each computer can use. The connector checks the window in front before every click or keystroke and refuses anything outside that list. This check runs on the computer itself.

Email clients, chat apps and password managers (Outlook, Teams, Slack, 1Password, Bitwarden and others) are refused even if someone asks for them.

Anyone on your team can stop a task at any moment from the dashboard. Every task also stops on its own after 80 steps if it hasn't finished.

The connector only makes outgoing, encrypted (HTTPS) connections to Knotwork; nothing connects in. It runs as the signed-in Windows user, not as an administrator. Its pairing key is protected with Windows' built-in encryption (DPAPI), and Knotwork stores only a one-way hash of it.

Knotwork is set to ask before it saves: it pauses, shows exactly what it's about to save and the screen it's on, and waits for someone on your team to approve or reject it. For QuickBooks, our servers also block any save that hasn't been approved.

Every task can be watched as it happens: the current screen and each step in plain English.

Each task keeps every screen it saw, every action it took, and every approval or rejection with who made it. Replays are private to your organization unless someone on your team creates a share link, which can be turned off at any time. Workflow run history can be exported as a CSV.

Owners and admins control who joins, and new members must be approved. Folders can be restricted to the people who need them.

Knotwork uses Anthropic's Claude through Anthropic's commercial API to read instructions and decide each step. Under Anthropic's commercial terms, content sent through the API is not used to train their models.

Knotwork runs on Vercel. Account and workflow data is kept in a managed Postgres database, and screenshots from tasks in private file storage that can only be reached through your signed-in dashboard or a share link you create.

Signing in asks only for your name and email address. Mailbox access is a separate step you choose, used only by workflows that read or send email. Mailbox access tokens are encrypted by Knotwork before they're stored.

Knotwork has not completed a SOC 2 or HIPAA audit. We'll say so here when that changes. If your organization needs a security review, we'll answer your questionnaire directly.