00:00
THE RECORD
Autonomy you can audit.
You are asleep while it works, so the only thing that makes this safe is the record. Every scope, every rule, every step and every stop is written down, timestamped, and yours to export — including the things it tried and was not allowed to do.
01:12
GRANTS
Draw the line once.
Scopes are per verb, not per app, and every one writes a line the first time it is used in a run. Nothing widens itself: if a job needs a verb it does not have, it does the part it can, drafts the rest, and asks once — in the morning report, never at three in the morning.
Granted per verb, not per app
RUN #0412 — Q3 renewal outreach, 14 accounts · lights out 21:00 → handoff 07:00
- read
- search history
- flag for morning review
- draft a reply
- send to known contactsonly threads you have replied to before
- send to anyone
- deletenot available in any planNeverInbox, delete: Never, locked
- read
- propose times
- book internal
- book with a client
- cancel a booked meeting
- read records
- log call notes
- move a deal stageforward only, never backwards
- export the contact list
- read the shared drive
- create a draft doc
- rename or move
- share outside the company
- read invoices
- refund under the approval limituses the limit above
- refund over the approval limit
14 allowed · 3 ask first · 6 never · approval limit $250
Sample data — Nightjar demo workspaceSample data — Nightjar demo workspace
See how each line is enforced →
03:40
ASK-FIRST
The list of things it must ask about.
Six of these are on for everyone from the first night and three of them cannot be switched off. Add your own in a sentence. An approval is a held job with a countdown, not a dead one — it never denies on your behalf, and a hold that reaches 07:00 simply appears in NEEDS YOU with one tap to approve.
ASK-FIRST RULES · 8
Fired 11× in 30 nights
Spend over $250
4×
Any new vendor or new domain
2×
Anything legal — contracts, terms, disputes
1×
Emails to accounts over $25k
3×
Deleting anything, anywhere
0×
Messaging someone you have never contacted
1×
Publishing anything public
yours
0×
Touching the production database
yours
0×
Asked 11 · Approved 9 · Rejected 2 · Auto-approved 0
Sample data — Nightjar demo workspace
Browse standing orders →
02:19
TRANSCRIPT
Every step, in order.
This is not a summary. It is the file.
TRANSCRIPT · RUN #0412 · 63 steps
4.2 MB
02:19:04
plan.step 3/7 “draft renewal email — Northwind”
02:19:06
tool crm.read account=Northwind → 1 record
02:19:09
model draft 1,240 tok → 214 words
02:19:11
guardrail spend=0 send=approved → pass
02:19:12
tool mail.draft → draft_88213
02:19:12
status done Δ 8.4s
02:33:41
plan.step 4/7 “send — Vector Labs”
02:33:41
guardrail approval limit $25k → HOLD
Steps 63 · Tool calls 128 · Guardrail checks 63 · Holds 1 · Blocked 1
Export run (.jsonl)
Sample data — Nightjar demo workspace
Every plan step, every tool call, every guardrail check and every result, with the time it took.
A blocked action is logged as loudly as a completed one — so if it ever tried something you did not grant, you will find the line, and it will not have happened.
The log is append-only. Nobody at Nightjar can edit it, including to fix our own bug.
Read last night’s report →
04:50
DATA
Where your night lives.
Four plain answers about what happens to your mail, your records and your transcripts — with the retention numbers stated once, here, so they can never drift from the ones on the privacy page.
Not training data
Your mail, records and transcripts are never used to train a model, ours or anyone else’s. Voice matching runs per account and stays there.
You choose retention
Transcripts are kept for the window on your plan and then deleted, not archived. Delete a run and its contents never enter memory, with no shadow copy.
Encrypted, and revocable
Credentials are stored as revocable tokens scoped to the verbs you granted, never as passwords.
Nobody reads your inbox
There is no human review queue. Support sees run IDs, step names and errors, not message contents.
Run logs 90 nights · Drafts 30 nights · Notes until you delete them · Credentials never stored
Retention by plan →
COMPLIANCE, PLAINLY
We do not claim a completed SOC 2 audit, because we have not earned one. Our observation window opened in February 2026. When there is a report we will link it here, with its date and its scope, rather than putting a badge in a footer.
05:30
STOP
The stop button.
The useful question is not whether an agent will get something wrong. It is how far wrong can travel before you wake up: one job, inside one scope, under one budget, with every step written down — and one switch that ends it from a locked phone.
STOP · RUN #0412
Working · step 4 of 7
Stop the run
The current step finishes or rolls back. Nothing is left half-done.
Everything already finished stays finished, and stays in the record.
Nothing else starts until you say so, from any device.
Sample data — Nightjar demo workspace
See how a night is built →
05:58
DAWN
Hand off the night. Keep the morning.
Read a real transcript before you trust it with anything. Night one costs nothing and tells you more than any demo.