Core engine built and tested. Product in development.
Backed authority for AI action.
Let AI agents act. Stay in control.
Avallo checks each consequential action an AI agent proposes against limits set by accountable people, at the moment it would take effect. If the action is outside those limits, it does not go ahead.
The challenge
AI agents are moving from insight to action
AI agents are beginning to commit funds, change records, approve requests and send messages on an organisation's behalf. Those actions must stay within policy, delegated authority and risk appetite, even when an agent is manipulated, compromised, overreaching or simply wrong.
Today, most organisations cope by:
- Having a person review every action
- Keeping AI to low-risk tasks
- Monitoring after the fact, once the action has taken effect
That is slow, costly and hard to scale.
For each action, the real question is whether this specific action is authorised right now, which makes this a delegated-authority problem.
The solution
Check every consequential action before it takes effect
Avallo sits between AI agents and the systems they act on. Accountable people set limits in advance for each workflow or role: which actions, with whom, up to what amount, and when a person must approve first. When an agent proposes an action, Avallo checks that one action against those limits at the moment it would take effect. The action goes ahead only with a single-use authorisation for it, and Avallo keeps a record of every decision that can be checked independently.
In other words, the agent can ask for anything. It can only do what accountable people have already approved.
Example: a payment
A bank's own purchasing agent receives an invoice with changed bank details and proposes paying the new account. Avallo refuses the payment, because the payee can only come from the approved supplier list. No money moves, and the refusal is recorded.
- Routine work needs no person. Actions inside approved limits go ahead. People see only the exceptions.
- Each action needs its own authorisation. Where a system acts only on Avallo's single-use authorisation, a manipulated or compromised agent cannot go beyond its limits.
- A record of every decision. Audit, or an independent party, can check who authorised what.
Use cases
Any action that commits the organisation
Avallo is designed to extend to any consequential action an AI agent takes, and the examples start with customer service. Each kind of action is specified and built before Avallo governs it. Today, the core engine is built and tested for account-to-account payments.
Customer service
Refunds and fee waivers
An agent refunds a customer or waives a fee. Above its limit, a named person approves first.
Not yet built
Customer service
Contact and bank details
An agent updates a customer's phone, email or bank details, a common step in account takeover. Only changes within approved conditions go ahead.
Not yet built
Customer service
Hardship arrangements
An agent agrees a hardship or repayment arrangement, only within terms people have approved.
Not yet built
Customer service
Credit limits
An agent raises a card or credit limit, up to an approved amount and no further.
Not yet built
Payments and agentic commerce
Supplier payments
A purchasing agent pays a supplier invoice, only to an approved supplier and within approved amounts.
Core built and tested
Operations
Records, approvals and IT changes
An agent changes a record, approves a request or changes a system, within the authority people have delegated.
Not yet built
Product in development
Where Avallo stands today
Avallo's core engine is built and tested; the product is in development. Productisation will be through a planned majority Australian-owned joint venture.
Built: the enforcement core. It checks each proposed action against its limits, issues a single-use authorisation, enforces it before the action takes effect and records each decision. It is built to production standards and tested, for account-to-account payments.
To be productised, integrated and hosted in Australia by TrustWorks360, a Melbourne company operating since 2019.
Still to build
- The distributed, fault-tolerant layer
- Connections to payment systems
- The authority workbench
- The approval and monitoring screens
- Hosting
Discuss a pilot
Stand behind every AI action
Enable AI agents to act with authority that is backed, bounded and provable.
Start with one workflow
We are seeking a first pilot with an Australian financial institution: one consequential workflow, hosted in Australia and run in shadow mode alongside your existing controls. Shadow mode records what Avallo would have decided and releases nothing.
- DesignChoose the workflow and set its limits from your existing policies and delegations.
- Shadow modeAvallo runs alongside your controls and records what it would have decided. It releases nothing.
- Prove valueCompare its decisions with your expected outcomes, then agree the next step.
Thank you
Your message has been sent to the Avallo team. We will be in touch to arrange a conversation.