Herkus AI

Herkus Custodian

Data-use Authority for AI Agents

Authority is not a one-time approval. It must still hold at the moment the data is used.

Mask the data. Decide where it may be used.

Data-use control for AI agents. Masking is the foundation: models and agents work with protected references. The core is the decision: whether a real value may be used for this execution, at this destination, at this moment.

Real values are used only at the last hop, by the business system.

Applies to data requests routed through Herkus Custodian.

Explore a PoCSee the scenario

How it works

A customer-service agent sends a confirmation email.

The model works with a protected reference. Herkus Custodian decides where the real address may be used.

Illustrative flow · Fictional values
1/4

1Mask. The real email address is replaced before the agent and the model see it.

Customer record · anna.k@example.comCRM → Herkus Custodian
Masked
Customer record · [EMAIL_1]Herkus Custodian → AI agent

2The model sees a reference only.

Draft a confirmation for [EMAIL_1]AI agent → LLM
Send the confirmation to [EMAIL_1]LLM → AI agent

3Decide, then use at the last hop. The real address is used for this email, at this moment.

Send email to [EMAIL_1]AI agent → Herkus Custodian
Use here, now? ✓
Real address filled in at the last hop ✓Herkus Custodian → Email

4Not given elsewhere. The same reference sent to another destination does not receive the real value.

Post [EMAIL_1] to an external tool ✗AI agent → Herkus Custodian
Not given ✗

Masking keeps real data out of the model. Herkus Custodian decides where it may be used.

Customer-controlled environment

The data-use decision belongs to this execution.

Herkus Custodian checks whether real data may be used at the moment of business use. An earlier approval does not stand in for the current decision.

Designed to run in a customer-controlled environment.

Audit design goal

Support a record of sensitive-data use without including the original sensitive values in that record.

How Herkus Custodian works

Mask. Decide. Use at the last hop.

  1. 1

    Mask

    Foundation

    Customer account numbers and addresses are replaced by protected references before they reach the model.

  2. 2

    Decide

    Core

    When an agent asks for a real value, Herkus Custodian decides whether it may be used now, for this destination.

  3. 3

    Use at the last hop

    Result

    The real value is filled in for the business system. An outgoing email or a replaced workflow does not receive it.

  • Customer-service agents
  • CRM and case systems
  • Account and address data
  • Outgoing messages

Talk to us

Explore one customer-data path.

Start with a customer-service Agent that uses customer account or address data in a business system.

Start a PoC
sales@herkus.ai