Security & control

Clear limits for everyone in your operation. Including the agents.

Wellsite brings your people, your service companies, and your AI agents into one place. That only works when every one of them has limits you set and can see.

You set the boundaries

Every agent works at the level you choose.

Watch

Observes and logs. Raises nothing.

Watch and draft

Raises recommendations and drafts work. Never acts.

Act inside a ceiling

Acts inside the ceiling. Everything above it comes to you.

No ceiling, no spending.

An agent that can spend always has a dollar limit. If you never set one, it can’t commit a dollar. A missing setting is treated as the most cautious answer, not the most generous one.

Outside email is its own switch.

An agent you trust to act still can’t email a vendor or hauler until an admin turns that on — and you can limit it to the domains you choose.

What no agent will ever do

Five things are off the table. Permanently.

No agent can:

Sign a filing.

Move money.

Grant anyone standing access.

Commit above its ceiling.

Make an offer.

These aren’t settings. They’re excluded from the permission system entirely — at every level, on every plan.

Access follows the work

A Wellsite account doesn’t open your operation.

People see your operation because they belong to your organization, in the role you gave them. Nobody gets in just by having an account.

Service companies see the job, not your business.

When you share a Project, the service company sees what the job needs: the well’s overview, projects, equipment, and documents. Never your production, economics, people, findings, or any other well — not through the screen, and not through a guessed link.

Access ends when the job does.

Close the Project and the service company’s access to it ends automatically. There’s no offboarding step to forget.

Every action has a name on it

You can always see who did what.

Every consequential action is recorded against the person, agent, or company that did it — what happened, when, and to what. Work a service company does on your Project stays in your records, attributed:

Jane Smith · ABC Well Service

The history stays accurate after the collaboration ends.

Agents that can’t be talked into things

They read the internet without trusting it.

When Regulatory & Compliance reads a regulator’s website to learn a new requirement, it treats the page as untrusted text. It checks every rule it finds against real evidence, and it’s built to refuse instructions planted in a page to steer it.

Security program

Details for your IT and security team.

Need details for a security review? Talk to us and we’ll walk your team through it.

Put agents on the work. Keep the control.