AI assistants

Permissions and safety

An assistant gets only what you approve, in one household or workspace, and you can take it back in one click.

What you approve

When an assistant connects, Invoist shows you a page with the assistant's name, where it sends you back to, and every permission it asks for. Nothing is shared until you approve. The assistant then sees only the household or workspace you chose.

An assistant names itself when it connects, and Invoist can't check that name. That's why the page also shows where approving sends you. Only approve a connection you started yourself, just now.

In a household

Anyone in the household can connect an assistant. It reads the household's bills. Marking bills as paid is added only when you allow it: when the assistant asks for it, or when you tick "Let it mark bills as paid" on a key.

Permission	What it covers
Read your household's bills `bills:read`	Who to pay, how much and when; what's paid; monthly totals; emails waiting for approval.
Mark bills as paid `bills:write`	Mark a bill as paid, or as not paid again. Nothing else changes. Off unless you turn it on.

In a business workspace

Only owners and admins can connect an assistant. It can read by default. Resolving review items is added only when the assistant asks for it and you approve. The permissions, in that one workspace:

Permission	What it covers
See workspace details `workspace:read`	Workspace name and expense categories. Never members or billing.
Read invoices `documents:read`	Documents, extracted fields, line items, and confidence scores.
Read the review queue `review:read`	Flagged items and why they were flagged.
Resolve review items `review:write`	Mark flagged items resolved or dismissed.
Read usage `usage:read`	Documents processed and cost this billing period.
Read workspace stats `stats:read`	Aggregate totals and recent activity.

What an assistant can never do

Delete bills, documents, or anything else. There is no delete tool.
Upload documents or approve senders. Those happen in the app, never through an assistant.
Pay a bill or move money. Marking a bill as paid only changes what Invoist shows.
See members, billing, or your other households and workspaces.
Reach anything outside Invoist. The tools have no browsing and no third-party access.

The tools that change something

mark_bill_paid (households, only if you allowed it) marks a bill as paid or as not paid again. resolve_review_item (businesses) clears a flagged invoice out of the review queue. Both are labeled as changes, so good assistants ask you before using them, and both are told to say what they changed.

Assistants can still misunderstand

If you say "mark them all paid" the assistant will mark them all paid. When in doubt, ask it to list the bills or invoices first and change them one at a time.

Disconnecting

Open Settings, then AI assistants, in the Invoist app.
Find the assistant under Connected.
Choose Disconnect. Every request it makes after that fails.

A key you created for an assistant that can't sign in is listed there too, and disconnects the same way.

What we store

Invoist records every tool an assistant uses: which assistant, which tool, and when. We do not receive or store your conversation with the assistant. What a tool returns, for example a bill's amount and sender, goes to the assistant's company and is handled under their terms. See the privacy policy.