How to govern Lindy
AI assistants that read your inbox, schedule, and act across connected apps without a person approving each step.
Lindy · Reviewed when the vendor ships a capability change or a customer declares the tool
How Lindy is used
We see three common ways businesses use Lindy, and we govern each one on its own terms. If your team uses it differently, that is fine: you describe the use in your own words and Certrak works out the governance from what it actually does.
Autonomous task agent
Consequence to people: HighGeneral-purpose AI agent that takes actions across your tools and systems - email, calendar, messaging, files
Personal informationMost outputs reviewedInternal use onlyChanges records in other systemsActs on its own
Workflow automation across systems
Consequence to people: MediumAutomating tasks across business systems - triggers, data movement, decisions in workflows
Internal informationNo human reviewInternal use onlyChanges records in other systemsActs on its own
Customer communications drafting
Consequence to people: MediumDrafting customer emails, support replies, or other outbound communications - reviewed before sending
Personal informationEvery output reviewedCustomers, no decisions about them
Governing Lindy in practice
- Name one person who owns Lindy in your business. Governance starts with a name.
- Write down what Lindy is used for. Certrak recognises 3 common uses: Autonomous task agent, Workflow automation across systems and Customer communications drafting. Yours may differ; write down yours.
- Decide what Lindy may and may not be given. Personal information is in scope for some uses; write the boundary down before it is needed.
- There is no human review of outputs. Decide whether that is acceptable for each use, and what would make you change it.
- Lindy can create, change, or delete records in another system without a person approving. Record which of these you allow, and who can change that.
- Look at this again every month, and sooner on any of these: industry incidents, vendor model updates, autonomy level changes and data classification changes.