How AGM keeps your bank account safe

The short version

AGM's AI can read your bank activity so it can help you run the restaurant. It cannot move money, it never sees your bank password, and nothing gets paid without you approving it yourself — with your password and 2-step code, or a passkey on a device you registered.

Bank links are read-only

When a bank is linked through AGM's bank feed, AGM asks only for read permissions: balances, transactions and the last 4 digits of account numbers. Every call to the bank feed passes a read-only check first. Any request to send a payment, transfer or ACH is refused in code before it leaves AGM. The live bank feed is still being switched on; until then AGM uses bank statement uploads.

AGM never asks for your bank password

• You link a bank only in the bank's own secure window (Teller Connect or Plaid Link). AGM never sees your bank username or password.
• AGM stores only the access token the bank feed gives back. It is encrypted with a key unique to your restaurant and is never shown back to anyone, including you.
• AGM refuses to save bank, card or other financial sign-ins in its password vault, and its cloud browser won't sign in to bank sites.

The AI never sees your bank numbers

Before anything goes to the AI, into a tool result or into AGM's logs, bank tokens are removed and account and routing numbers are masked to the last 4 digits. Routing numbers are stored encrypted and shown masked.

The AI can only suggest payments

• Ask AGM can draft a payment for a bill, but it only files a suggestion. It cannot approve or pay anything, even if you type "yes, pay it" in chat.
• To approve a payment you open the bill in AGM and confirm with your password and a fresh 2-step code, or with a passkey (Face ID, Touch ID, fingerprint or device PIN) on a device you registered. Registering a device needs your password and 2-step code once.
• After you confirm, an approval window stays open on that device for 15 minutes (you can set 5–30), so more approvals need one tap. It ends when you sign out, when your device or network (IP address) changes, or when time runs out. You can end it early in Connections → Bank accounts.
• Approve all selected in Bills approves a batch of bills with one confirmation. Limits are still checked bill by bill.
• A payment over your per-payment limit always needs a fresh confirmation, even inside the window, and is still refused if it's over the limit.
• Ask AGM and chat can never open, extend or use the approval window. Passkeys and the window work for payment approvals only.
• You can set a per-payment limit and a daily limit (Connections → Bank accounts). Approvals over a limit are refused.
• Today AGM does not send money from your bank at all. An approved bill is marked approved, and you pay it the way you always do.

The AI can't change who has access

The AI can't add or remove users, change roles, turn off 2-step sign-in, or add, change or disconnect a bank. Those requests are refused by the server, not just by the AI's instructions.

Only the owner, with 2-step sign-in

• Only an owner can link a bank, change bank details, set limits, approve payments or disconnect a bank. Managers and employees can't.
• Each of those needs 2-step sign-in turned on, plus a fresh password and code at that moment. Linking, changing or disconnecting a bank, changing limits, and changing users, roles or 2-step sign-in always need a fresh password and code; a passkey or approval window never counts for those. Payment approvals can also use a passkey or the approval window (above). Five wrong tries, including wrong passkeys, locks it for 15 minutes.

Every bank action is logged, and you're alerted

Linking or disconnecting a bank, changing bank details, viewing bank pages, payment suggestions, approvals, refused attempts and failed step-ups all go into a security log that can't be edited. Important ones raise an alert in Connections → Bank accounts.

The kill switch: disconnect all banks

Connections → Bank accounts → Disconnect all banks removes every bank link, marks every bank account disconnected, turns off check printing, deletes any saved financial sign-ins and cancels pending payment suggestions. It needs your password and 2-step code.

What if someone tries to trick the AI?

Text inside an email, invoice or web page might try to tell the AI to pay someone. It can't work: the server blocks every money and bank action that comes from the AI, no matter what the AI was told. Only you, signed in, with your password and code or your registered passkey, can approve a payment.

What we don't claim

AGM has not completed a SOC 2 audit or an outside penetration test. This page describes exactly what the software does today.