Where does my data live?
The desktop application's position, as the homepage states it:
Crolle runs on your computer, not in someone else’s browser tab. Every conversation, every file it opens and every step it takes is stored on that device and nowhere else — there is no copy on our servers, because there is no server holding them.
What does leave: the question you ask travels through your company’s own Crolle server to reach the model, and that server records what was spent — never what was said. A model cannot answer a question it was never sent, and we would rather tell you exactly where the line falls than claim it isn’t there.
The business records themselves, the BOQs, certificates, commitments and decisions, are the company's ERP record, which the agent reaches only through the four governed tools described on Crolle's ERP over MCP.
Which controls govern the agent?
Each control below is designed to be enforced by the ERP beneath the tools, not by the agent's instructions.
| Control | What it means | Where it applies |
|---|---|---|
| Delegated authority | The agent reaches only what the signed-in person is authorised to use, by role and by scope | Every search, read and change |
| Visible gaps in access | A capability out of reach is listed with the missing right and who grants it | Capability search |
| Versioned contracts | Each capability has an exact, versioned contract the agent must follow | Before any read or change |
| Staged changes | The agent stages one change at a time and reports what happened to it | Every change |
| Human approval | An authorised person commits a staged change; a recommendation is not permission | Every commitment |
| Audit trail | What was proposed, who decided and on what evidence, recoverable afterwards | Every decision |
| Refusal by name | An operation whose records are missing is refused, not guessed | A workspace not yet set up |
| Local storage | Conversations, opened files and steps are stored on the user's device | The desktop application |
| Spend, not content | The company's Crolle server records what was spent, never what was said | Questions sent to the model |
What can the agent never do?
- Commit a change, approve a certificate, release retention, place an order or change a budget on its own authority.
- Act beyond the person it works for, or borrow a wider right from a service account.
- Work around a refusal, by guessing at missing records or reaching the data another way.
- Act without a record of what it proposed and what was decided.
These limits are the same for every workflow on the agent overview, from preparing an IPC to tracking retention.
Why is governance beneath the tools stronger than an AI policy?
A policy describes how an AI system is meant to behave. A control beneath the tools decides how it can behave. Both matter, but only the second holds when the agent is wrong, when the prompt is wrong or when someone connects a different agent.
That placement is the core of Crolle's design: a rule enforced in the interface can be bypassed by reaching the data another way, while a rule enforced beneath the tools applies to every caller. What is an agentic ERP? explains the architecture, and one ERP or separate tools? explains why an agent spread across separate systems cannot be governed this way.
Common questions
Where is my data stored when I use Crolle?
On the desktop, every conversation, every file Crolle opens and every step it takes is stored on the user's device, with no copy on Crolle's servers. The question asked travels through the company's own Crolle server to reach the model, and that server records what was spent, never what was said.
Can Crolle's AI agent change ERP records without approval?
No. The agent can stage one change at a time and report what happened to it. An authorised person reviews the evidence and commits the change, and the audit trail records what was proposed, who decided and on what evidence.
Does the agent have more access than the person using it?
No. Every search, read and change runs under the signed-in person's own rights. A capability out of reach is listed with the right that is missing and who grants it, rather than reached through a wider service account.
Is Crolle certified under ISO 27001 or ISO 42001?
This page makes no certification claims. It describes how Crolle's controls are designed: delegated authority, staged changes, human approval and an audit trail. If your organisation needs a specific assessment, write to info@crolle.ai and say which one.
Crolle is opening early access to a small group of contractors and partners. To see it on your own projects, write to info@crolle.ai.