Method

No black box.

Before we start, you know what the AI employee will do, with which data and how to stop it. Afterwards, you know what it has done, every month.

Request a call Our security answers

Pilot timeline

Six weeks, week by week.

We do the set-up. Your team grants access, reviews and approves: that is all we ask of them.

Pilot plan

Example: chasing documents

CallBefore the pilot
Your firm
Twenty minutes by video to describe a task that recurs every week.
17RECORDS
Tell you plainly whether it suits an AI employee.
ScopingWeek 1
Your firm
A two-hour video session to describe the task and measure the time it takes today. Only the access we need.
17RECORDS
The transparency sheet, the message templates and the data processing agreement, signed before any data is processed.
Set-upWeeks 2 and 3
Your firm
Review the message templates and correct them.
17RECORDS
Connect the AI employee to your tools and test it on real cases, in draft mode.
Go-liveWeeks 4 to 6
Your firm
Approve the prepared messages before they are sent.
17RECORDS
Supervise closely, correct, adjust.
ReviewEnd of week 6
Your firm
Decide: carry on with the subscription, or stop.
17RECORDS
The time saved, measured, and the complete Delivery Passport.

See services and prices

Deliverables

The Delivery Passport.

Eight documents handed over with every project. Each one answers a question that you, a client or an auditor will ask one day.

How does the team use the AI employee, including someone who joins mid-year?
User guide
What do we do if the AI employee makes a mistake or stops?
What to do if…
What exactly does the AI do, and with which data?
AI transparency sheet
What goes in our GDPR record, and who are the sub-processors?
GDPR record
How do we stop, and what do we get back?
Reversibility plan
How much time does it save us?
Time saved, every month
Who answers the team’s questions in the evening or at the weekend?
Help assistant
Can our IT provider take over?
Technical sheet

Delivery Passport

Version 1.0

Chasing missing documents

Vasseur-Ondine & Co, fictitious example¹

User guide
What to do if…
AI transparency sheet
GDPR record
Reversibility plan
Time saved, every month
Help assistant
Technical sheet

Fictitious example

Extract: the transparency sheet.

Document 03, filled in for a fictitious firm. Every real sheet is written before we start.

Passport · 03 AI transparency sheet

Example · fictitious firm¹

Client: Vasseur-Ondine & Co, 6 people
Process: Chasing missing documents, by email
AI model: Named in every real sheet, with its provider, where it is hosted and how long data is kept. It can be replaced without redoing the set-up.
Data processed: The client’s name and email, the list of expected documents, the names of files received. The content of accounting documents is not analysed.
Human decision: During the draft phase, the staff member approves every message. After that, they approve any reminder beyond the second.
Known limits: A badly named or unreadable file is not recognised: it is flagged to the staff member, who files it.
To stop it: A switch in the dashboard. Pending reminders are cancelled.

Before you sign

Security and trust.

The questions a partner, or their data protection officer, asks before signing, and our answers.

Security questionnaire

Completed by 17RECORDS

Can the AI act without human oversight?

Not at first

Every new task starts in draft mode: a person approves each message. Autonomy comes later, and only for reversible actions. Prices, commitments, deletions and payments remain human decisions.

Which data does the AI employee process?

The task’s data, no more

It is listed in writing in the transparency sheet before we start, together with the AI models used and their providers.

Where is the data hosted?

In a place chosen with you

The 17RECORDS server is with OVH, in Strasbourg. Where a client’s data is hosted is decided with that client, within the European Union when the data requires it. Installation on your own server is possible. If the chosen AI model is hosted outside the European Union, the transparency sheet and the list of sub-processors say so, with the safeguards for the transfer.

When is the data processing agreement signed?

Before any processing

The data processing agreement (GDPR article 28) is signed at scoping, before any data is processed. The list of sub-processors is attached to it.

Do your clients know they are talking to an AI?

Yes

The assistant introduces itself as an AI, as article 50 of the EU AI Act provides, and hands over to your team as soon as a human answer is useful.²

What happens in the event of a personal data breach?

You are informed

As a processor, we must inform you without undue delay (GDPR article 33), with the information you need to notify the supervisory authority (the CNIL in France) within 72 hours.

Can the AI employee be switched off?

Yes, at any time

A switch stops it. The reversibility plan describes how to recover your data, your settings and your access.

How is your server protected?

Hardened on 10 October 2026

Key-only login, a firewall, blocking of repeated attempts, automatic security updates. Its administration panel is not exposed to the internet.

How do I report a security flaw?

By email

Write to security@17records.com. The address is also published in the site’s security.txt file, following RFC 9116.

Twenty minutes to find out whether your task is a good fit.

Request a call

or write to contact@17records.com

Appointment

20 minutes · by video call

On your side: A task that recurs every week, and the tools you use.
On ours: Whether an AI employee can take it on, with which offer, at what price and from when.
Then: A written fixed-price proposal, if you ask for one. Nothing is committed before you sign.

Example prepared for a fictitious firm. No client is named on this site without their written consent.
EU Artificial Intelligence Act: article 4 (AI literacy of the people who use it) has applied since 2 February 2025, article 50 (transparency of conversational assistants) since 2 August 2026. Source: eur-lex.europa.eu.