Skip to content
ETHORITY®
Search ETHORITY
DE

GOOD AI PRISM · TOPIC AREA · DOCUMENTS, WORKFLOW & AGENTS

US$65.5bn for agents. Gate every pilot.

Choose document and workflow agents by what they may do, what a case costs and where data stays, with an approval gate before production.

Good AI Prism v3.12 close-up: workflow
24
AI offerings placed in Documents, Workflow & Agents, plus 1 provider record (ABBYY)Good AI Prism, Oct 2026
US$65.5bn
on AI agents and assistants in 2027, from US$16.5bn in 2025Gartner, Sep 2026 · gartner.com ↗
40%+
of agentic AI projects expected to be canceled by end of 2027Gartner, Jun 2025 · gartner.com ↗
10%
at most scale agents in any one functionMcKinsey, Nov 2025 · mckinsey.com ↗
~130

Most "agents" are relabelled tools.

Gartner estimates only about 130 of the thousands of vendors marketing agentic AI are real.

Gartner, Jun 2025

21%

Agent governance lags agent use.

Only one organisation in five reports mature governance for its AI agents.

Deloitte, via Good AI Prism Study 2026/27

8 of 11

EU data options are documented here.

Eight of eleven profiled workflow offerings name an EU region, EU default or EU option.

Good AI Prism Registry, 20 Oct 2026

How to use this page

Three tools and one offer turn this page into a decision.

Eleven workflow and agent offerings, fact by fact

Billing unit, price, training terms, data location, integrations and certifications, each with source and date.

● Documented by the provider○ Stated by the provider◐ ETHORITY analysis◌ Independent source

Dify

LangGenius (Dify) · Platform

Documents, Workflow & Agents

Dify is a source-available platform for visually building LLM chat apps, agents and workflows with knowledge bases, Marketplace model and tool plugins, human-input pause nodes, run cloud-hosted or self-hosted.

Published price
How it is billed
Where data is stored
Does it train AI on your data?
Open profile

Dify

LangGenius (Dify) · Platform

Facts, sources and conditions

Dify is a source-available platform for visually building LLM chat apps, agents and workflows with knowledge bases, Marketplace model and tool plugins, human-input pause nodes, run cloud-hosted or self-hosted.
Stated by the providerdify.ai ↗
Where it sits on the map · 1 · 1
What it is used for
Build and run LLM agents and workflows (cloud or self-hosted)
ETHORITY analysisdify.ai ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Per workspace per month (monthly or annual), with message-credit, member, app and knowledge quotas
Stated by the providerdify.ai ↗

Enterprise: contact sales, no price

Published price
Sandbox free (200 message credits); Professional $59/workspace/month or $590/year (3 members, 5,000 credits/month); Team $159/workspace/month or $1,590/year (50 members, 10,000 credits/month); taxes extra
Unit: USD (shown as $)
Stated by the providerdify.ai ↗

currency code not named on page

Where data is stored
Dify Cloud region not named ("in our managed cloud region"); Enterprise: Dify-managed single-tenant cluster "in your region" or customer-managed in own AWS/GCP/Azure account; privacy policy lists processing in US, Australia, Canada, China, EEA and UK
Stated by the providerdify.ai ↗

Cloud wording from https://dify.ai/pricing/dify-cloud; processing locations from https://dify.ai/legal/privacy-policy (website servers 'located in the United States'). No named EU region for Dify Cloud

Does it train AI on your data?
Not used for training: "We do not train AI models ourselves, and we will not use your AI interaction data for model training."
Stated by the providerdify.ai ↗

With own API key, training depends on customer's agreement with that model provider; sub-processors 'prohibited from using your data for model training'

Connects with
Model providers, tools, data sources and MCP integrations installable from the Dify Marketplace or self-built
Stated by the providerdify.ai ↗
Certificates and audit reports
SOC 2 Type II (attestation, auditor Sensiba); ISO 27001:2022 (assessed by Johanson); scope boundary not stated
Stated by the providerdify.ai ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. The trust centre names SOC 2 Type 1; the March 2026 blog and enterprise page name Type II. Confirm the applicable report.

Limitations
Human Input web-app delivery not available in Trigger-started workflows; request closes after first response; default 3-day timeout; upload caps (e.g. 15 MB documents); Sandbox log history 30 days
Documented by the providerdocs.dify.ai ↗

plan limits from https://dify.ai/pricing/dify-cloud

Open the full profile →

Rossum

Rossum · Product

Documents, Workflow & Agents

Rossum captures data from invoices, purchase orders and bills of lading using its in-house transactional LLM Aurora, holding fields below confidence thresholds for human validation before export to SAP or Coupa.

Published price
How it is billed
Where data is stored
Certificates and audit reports
Open profile

Rossum

Rossum · Product

Facts, sources and conditions

Rossum captures data from invoices, purchase orders and bills of lading using its in-house transactional LLM Aurora, holding fields below confidence thresholds for human validation before export to SAP or Coupa.
Stated by the providerrossum.ai ↗

Aurora and confidence-threshold behaviour are described on the provider’s Aurora page. https://rossum.ai/aurora-advanced-ai/

Where it sits on the map · 1 · 1
What it is used for
Automate transactional document capture for AP and order processing
ETHORITY analysisrossum.ai ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Annual plans "based on the volume of pages or documents you process" and workflow complexity; overage per additional page; minimum contract one year
Stated by the providerrossum.ai ↗
Published price
Starter "Starting at $18,000 per year"; Business, Enterprise, Ultimate: quote
Unit: USD per year
Stated by the providerrossum.ai ↗

included volumes not stated

Where data is stored
AWS; EU default for new customers: primary eu-central-1 (Frankfurt), backup eu-west-1 (Ireland), or Ireland primary/Frankfurt backup; US and Japan regions also offered
Stated by the providerrossum.ai ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Source conflict: same page's 'Data Processing and Transfers' section lists EU, Ireland and Czech Republic, not matching region list. Enterprise plan lists 'Preferred cloud location' (https://rossum.ai/pricing/)

Connects with
SAP, Coupa, Workday "and more"; logos NetSuite, Xero, Microsoft Dynamics, QuickBooks; API access, webhooks
Stated by the providerrossum.ai ↗

no count; webhooks/API from https://rossum.ai/pricing/

Certificates and audit reports
ISO/IEC 27001:2022 (third-party certified, issuer not named); ISO/IEC 42001:2023; SOC 2 Type II attestation (period 15 Jun 2024–24 Jun 2025); TX-RAMP Level 1 (certificate ID TX1114698)
Stated by the providerrossum.ai ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Source conflict: pricing FAQ (https://rossum.ai/pricing/) lists HIPAA among 'ISO 27001, SOC2, HIPAA, TX-RAMP' — HIPAA is a law and not on security page. Not registry-verified. Trust Center (https://trust.rossum.ai/)

Limitations
Confidence-threshold feature "is deprecated"; "estimating this accuracy correctly in all cases is still an unsolved problem"; trade-off between automation and manual review; one-year minimum contract
Documented by the providerknowledge-base.rossum.ai ↗

Provider-stated claims only: 'average accuracy of 92.5%' (Aurora page); 'Up to 66% error reduction' (transactional page)

Open the full profile →

Instabase AI Hub

Instabase · Platform

Documents, Workflow & Agents

According to Instabase: “Instabase can classify files, discern intent, and even split multi-document packets into individual files.”

Where data is stored
Does it train AI on your data?
Certificates and audit reports
Connects with
Open profile

Instabase AI Hub

Instabase · Platform

Facts, sources and conditions

According to Instabase: “Instabase can classify files, discern intent, and even split multi-document packets into individual files.”
Stated by the providerinstabase.com ↗

The original product page was inaccessible. Confirm the current product scope against the applicable documentation or contract.

Where it sits on the map · 1 · 1
What it is used for
Classify, split and extract data from complex document packets
ETHORITY analysisdocs.instabase.com ↗

Task classification by ETHORITY; match it to your intended use.

Where data is stored
Sub-processors AWS, Google, Microsoft listed with locations "United States, European Union, and United Kingdom"; OpenAI "United States, European Union"; pricing lists "multi-region replication and failover"
Documented by the providerinstabase.com ↗

No customer-selectable EU region or city stated on pages read; trust page and privacy doc silent on region

Does it train AI on your data?
Used unless you opt out: LLM providers "won't use your data to improve their models"; "Users of certain paid plans have the option of opting-out" of content used to improve services
Documented by the providerdocs.instabase.com ↗

Implies Instabase may use content to improve services unless opted out (paid plans / written exception via privacy@instabase.com)

Connects with
Storage: AWS S3, Azure Blob Storage, Google Cloud Storage, SharePoint Online; mailbox connections; LLM endpoints OpenAI, Azure OpenAI, AWS Bedrock; Google Vision (enterprise); API and SDK
Documented by the providerdocs.instabase.com ↗

Mailbox connection referenced via navigation link only

Certificates and audit reports
Provider claim: "Instabase holds certifications and attestations for SOC 2 Type II and HIPAA"; "renewed annually by independent bodies"; auditor and period not named
Stated by the providerinstabase.com ↗

SOC 2 is an attestation; HIPAA, GDPR and CCPA are laws.

Limitations
Files "up to 50MB"; legacy mode digitization "supported only for languages that use Latin characters"; audit logs in private preview for Enterprise single-tenant only
Documented by the providerdocs.instabase.com ↗

50MB from https://instabase.com/pricing/; audit-log scope from https://docs.instabase.com/admin/audit-logs

Open the full profile →

Beam AI

Beam AI · Platform

Documents, Workflow & Agents

Beam AI runs enterprise AI agents on graph-based workflows that mix fixed steps with LLM nodes, pausing at consent nodes for human approval and drawing on 1,500+ prebuilt connectors.

How it is billed
Where data is stored
Does it train AI on your data?
Certificates and audit reports
Open profile

Beam AI

Beam AI · Platform

Facts, sources and conditions

Beam AI runs enterprise AI agents on graph-based workflows that mix fixed steps with LLM nodes, pausing at consent nodes for human approval and drawing on 1,500+ prebuilt connectors.
Stated by the providerbeam.ai ↗

Description follows the provider's agentic-automation page.

Where it sits on the map · 1 · 1
What it is used for
Build and run workflow-based AI agents for back-office processes
ETHORITY analysisbeam.ai ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Terms: "The ongoing fees are billed in advance by calendar month, unless otherwise agreed"; pricing units set in individual Contract Form
Stated by the providerbeam.ai ↗

No public pricing page found; unit itself not published

Where data is stored
Data security annex: hosting on AWS, Microsoft Azure, Google Cloud; regions EEA, United States, Australia/New Zealand; customer data hosted in region tied to the customer's Beam account; AI inference in matching region "where regional processing is available and configured"
Documented by the providerbeam.ai ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Contradiction: privacy policy s.4.3 says "Our servers are located in Europe" (https://beam.ai/legal/privacy-policy); /platform says "Beam is hosted in the EU"; homepage lists "EU data residency". Specific cloud regions (e.g. Frankfurt) not named

Does it train AI on your data?
Not used for training: customer data "is never used to train generalized AI or machine-learning models"
Documented by the providerbeam.ai ↗

Consistent with data-security page (inputs/outputs not used to train shared or public models) and Agent OS page "Data sent to LLMs is not used for training." Terms s.6.4 permit anonymised aggregated analytics from customer data for product enhancement

Connects with
"1500+ pre-built connectors" incl. SAP, Oracle, Salesforce, Workday; /platform names Airtable, Aircall, ServiceNow, Copper, Asana, Sage, ClickUp; MCP and A2A protocols for external agent platforms
Stated by the providerbeam.ai ↗

Count from https://beam.ai/platform/agentic-automation and agent-os

Certificates and audit reports
Provider claims only: homepage "SOC 2 Type II certified and GDPR compliant"; /platform "With ISO 27001 and SOC Type II certifications". No auditor, scope or report period published on pages read
Stated by the providerbeam.ai ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. SOC 2 is an attestation, not a certification; GDPR is a law. Inconsistent across own pages: agentic-automation page says only "SOC 2 compliant, GDPR ready"; data-security page names no ISO/SOC report. Not registry-verified. HIPAA, NYC LL144 bias audit also listed on homepage

Limitations
Terms s.10.2: "All information on the Services shall not constitute a guarantee for the quality of the Services" unless expressly agreed; s.8.5 puts risk that Applications meet requirements on the customer
Stated by the providerbeam.ai ↗

Contractual disclaimer only; no product-specific limitations stated on pages read

Open the full profile →

Workato Genies

Workato · Agent

Documents, Workflow & Agents

According to Workato: “Workato Genies go beyond traditional AI agents – they can be customized with unique KPIs”

Published price
How it is billed
Where data is stored
Does it train AI on your data?
Open profile

Workato Genies

Workato · Agent

Facts, sources and conditions

According to Workato: “Workato Genies go beyond traditional AI agents – they can be customized with unique KPIs”
Stated by the providerworkato.com ↗
Where it sits on the map · 1 · 1
What it is used for
Prebuilt and custom AI agents on an integration platform
ETHORITY analysisdocs.workato.com ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
"Workato measures Genie usage in Genie actions"; each input prompt = one Genie action; recipe steps billed as Tasks, IDP as Pages. Self-service plans bill in Workato credits
Documented by the providerdocs.workato.com ↗

Two unit systems in own docs: Genie actions (Agent Studio pricing) vs single 'Workato credits' unit (https://docs.workato.com/en/pricing/self-service/self-service). FAQ: Genies "available to customers on specific pricing plans"

Published price
Workato Free: one-time 50,000 credits; Workato Pro: $75 (2,500 credits/month), $100 (3,500), $275 (10,000), $780 (30,000), $1,275 (50,000) per month; Enterprise priced separately
Unit: USD per month
Documented by the providerdocs.workato.com ↗

Self-service page does not name Genies/Agent Studio explicitly; currency shown as '$' only; Genie pricing for Enterprise not published

Where data is stored
Genies available in US, EU, AU, SG, JP data centers; Genie models hosted in US, EU, APAC regions and respect residency "where possible"; EU data center: "All LLM calls and data processing remain in-region"
Documented by the providerdocs.workato.com ↗

EU quote from https://www.workato.com/product-hub/changelog/workato-ai-features-now-available-in-eu-data-center/ (Oct 2025), which adds "existing recipes continue on US models". Hedge 'where possible' vs 'remain in-region' differs between pages. EU city/cloud provider not named

Does it train AI on your data?
Not used for training: "AI by Workato doesn't use user data for training purposes."
Documented by the providerdocs.workato.com ↗

Statement is on the AI by Workato connector page; Genie-specific docs (FAQ, data page) do not address training

Connects with
Genies use skills built from Workato recipes and app connectors, MCP servers; chat via Slack and Microsoft Teams; Agent Studio Developer API
Documented by the providerdocs.workato.com ↗

Slack and Teams support follows the Agent Studio documentation.

Certificates and audit reports
Listed by provider: ISO 27001, ISO 27701, ISO 42001, SOC 1 Type II, SOC 2 Type II, SOC 3, PCI-DSS v4.0.1 Level 1 (QSA), IRAP (PROTECTED), NIST 800-171A r2 (C3PAO); SOC reports under NDA
Documented by the providerdocs.workato.com ↗

Company-level scope; confirm Genie-specific coverage. SOC reports are attestations.

Limitations
Files capped at 25MB, video not supported; knowledge search returns top 10 documents in 8,000-character chunks; semantic search weak on JSON/CSV; "LLMs can make arithmetic errors"; skill responses capped at 250 KB; "Genies requiring Business approvals can't process autonomous tasks"
Documented by the providerdocs.workato.com ↗

AI by Workato not available in CN data center

Open the full profile →

Appian Agent Studio

Appian · Platform

Documents, Workflow & Agents

Agent Studio lets Appian designers configure AI agents that follow prompt instructions and call tools, MCP servers and Appian process models to route cases, update records and start workflows.

How it is billed
Where data is stored
Does it train AI on your data?
Certificates and audit reports
Open profile

Appian Agent Studio

Appian · Platform

Facts, sources and conditions

Agent Studio lets Appian designers configure AI agents that follow prompt instructions and call tools, MCP servers and Appian process models to route cases, update records and start workflows.
Stated by the providerdocs.appian.com ↗
Where it sits on the map · 1 · 1
What it is used for
Build governed AI agents inside low-code business processes
ETHORITY analysisdocs.appian.com ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
"Priced per user, per month, per app"; tiers carry AI Action quotas (Standard 200K, Advanced 500K, Premium 1M AI Actions per month)
Stated by the providerappian.com ↗

AI Agents listed only for Advanced and Premium tiers

Where data is stored
AI Agents available in AWS Europe regions incl. Frankfurt (eu-central-1), Ireland, Paris, London, Zurich, Stockholm, Milan; not Spain (eu-south-2). Data "remains within your designated region unless you explicitly configure cross-region processing using inference profiles"
Documented by the providerdocs.appian.com ↗

Appian GPT models (GPT 5.4/5.5) documented as US/GovCloud only; region statement from https://docs.appian.com/suite/help/26.3/security-compliance.html

Does it train AI on your data?
Not used for training: "Appian does not use your data to train or improve underlying AI models."
Documented by the providerdocs.appian.com ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Source conflict: Private AI page (https://docs.appian.com/suite/help/26.8/private-ai.html) also says 'Your data is only used to train your models and those models are never shared' (customer-specific models, e.g. AI skills) vs 'No data is used to train models'

Connects with
Agent tools access data, trigger processes and call other agents; "MCP tools let agents interact with third-party systems without custom integrations"
Documented by the providerdocs.appian.com ↗

no connector count stated

Certificates and audit reports
Appian Cloud: ISO/IEC 27001:2022; ISO 27017:2015; ISO 27018:2019; SOC 1 Type II/ISAE 3402, SOC 2 Type II, SOC 3, SOC 2 C5 Type II (attestations by independent audit firm, C5:2020); PCI DSS (external auditor); FedRAMP Moderate/High ATO; DISA IL2/4/5 PA; GovRAMP Moderate; Cyber Essentials/Plus; ENS (Spain); ISO 9001:2015 (Appian Engineering)
Stated by the providerappian.com ↗

Issuers/auditors not named in text (only a Coalfire logo filename); not registry-verified. AI doc states AI capabilities 'inherit these certifications' (https://docs.appian.com/suite/help/26.3/security-compliance.html). HIPAA/GxP/21 CFR Part 11 are compliance/alignment claims, not certifications

Limitations
"AI agents involve LLM calls and tool execution, which introduce latency"; "Reliability depends on prompt quality, tool configuration, and the complexity of the reasoning required"; agents exceeding resource limits are stopped automatically; up to five parallel tool calls per reasoning step
Documented by the providerdocs.appian.com ↗

Pricing page footnote: some features 'may not be available or may have limited functionality in self-managed deployments' (https://appian.com/products/pricing)

Open the full profile →

Doxis AI.dp

Doxis (formerly Klippa) · Product

Documents, Workflow & Agents

According to Doxis (formerly Klippa): “Doxis’ solution leverages AI to analyze the pixel-level structure of documents in the metadata to detect fraud.”

How it is billed
Where data is stored
Certificates and audit reports
Connects with
Open profile

Doxis AI.dp

Doxis (formerly Klippa) · Product

Facts, sources and conditions

According to Doxis (formerly Klippa): “Doxis’ solution leverages AI to analyze the pixel-level structure of documents in the metadata to detect fraud.”
Stated by the providerklippa.com ↗
Where it sits on the map · 1 · 1
What it is used for
Detect tampered or forged documents in screening and onboarding
ETHORITY analysisklippa.com ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Annual licences or pay-per-document; platform: pay-as-you-go with credit top-ups and monthly invoicing; enterprise on request
Stated by the providerklippa.com ↗

Pay-as-you-go/credits from https://www.klippa.com/en/dochorizon/platform/

Where data is stored
"Servers are in Amsterdam by default"; sub-processor list: Microsoft Azure West Europe (Amsterdam), Google Cloud and AWS within the EEA; custom server location "possible in any location worldwide"
Stated by the providerklippa.com ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Inconsistent: fraud-detection page says EU-hosted, document-checking and AI-agent pages say servers "located in Europe and the US". Sub-processor page last updated 24 May 2023 (https://help.klippa.com/en/article/list-of-sub-processors-dochorizon-1cvij7c/)

Connects with
Email, mobile capture, API, SFTP, SDKs; "over 200 third-party integrations"; named: Dynamics 365, NetSuite, QuickBooks, SAP, Xero, Zoho Books, Dropbox, Google Drive, OneDrive, SharePoint; output JSON, XML, PDF, CSV; cross-checks against third-party databases
Stated by the providerklippa.com ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Count inconsistent: platform page cites 50+ integrations (https://www.klippa.com/en/dochorizon/platform/)

Certificates and audit reports
Provider claims: ISO 27001 (press release July 2023, no version, issuer, scope or validity given), ISO 9001, ISAE 3000 Type I
Stated by the providerklippa.com ↗

ISAE 3000 is an assurance report, not a certification; GDPR/CCPA are laws. ISO 9001 listed in platform FAQ but not in logo section. Issuer unknown; not registry-verified

Limitations
"Doxis supports all Latin-based languages, with additional languages available on request"; platform provided "as is"; Doxis not responsible for accuracy of processed data, which depends on uploaded data quality
Stated by the providerklippa.com ↗

Disclaimers from https://www.klippa.com/en/dochorizon/terms-and-conditions/; no fraud-detection-specific limitations stated

Open the full profile →

Relevance AI

Relevance AI · Platform

Documents, Workflow & Agents

According to Relevance AI: “Subject-matter experts can use Relevance to design powerful AI agents without relying on developer resources.”

Published price
How it is billed
Where data is stored
Does it train AI on your data?
Open profile

Relevance AI

Relevance AI · Platform

Facts, sources and conditions

According to Relevance AI: “Subject-matter experts can use Relevance to design powerful AI agents without relying on developer resources.”
Stated by the providerrelevanceai.com ↗
Where it sits on the map · 1 · 1
What it is used for
No-code builder for AI agents and multi-agent workforces
ETHORITY analysisrelevanceai.com ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Subscription per plan with monthly Actions and Vendor Credits allowance; top-ups $80 per 1,000 Actions and $20 per 10,000 Vendor Credits; BYOK skips Vendor Credits
Documented by the providerrelevanceai.com ↗

Base-plan Actions reset at renewal; purchased top-ups roll over

Published price
Pro $29/month ($19/month annual), 2,500 Actions/month, 2 build users; Team $349/month ($234/month annual), 7,000 Actions/month, 5 build users, 45 end users; Enterprise custom
Unit: USD per month
Documented by the providerrelevanceai.com ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Contradictions: website pricing page https://relevanceai.com/pricing shows only Enterprise ('Talk to sales'); docs pricing gives Vendor Credits as $20/$70 per month in plan details but 10,000/35,000 per month in comparison table; plans doc example gives Pro 3,000 Vendor Credits

Where data is stored
Regions: Australia (Sydney), US (N. Virginia), EU/UK (London); region "chosen at signup" and cannot be changed after org creation
Documented by the providerrelevanceai.com ↗

EU option is London (UK), not an EU-27 region named; primary cloud host not named

Does it train AI on your data?
Not used for training: company does not train any models on customer data; metadata may be used to improve features like search
Documented by the providerrelevanceai.com ↗

Exception stated for partnership agreements. OpenAI/Anthropic listed as not logging or training on data, DPAs available

Connects with
"2,000+ Integrations" (pricing); "1,000+ apps" (enterprise page); Slack and email escalation tools; OTEL & Delta Share export
Stated by the providerrelevanceai.com ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Count inconsistent between own pages (https://relevanceai.com/enterprise says 1,000+)

Certificates and audit reports
Provider claim: "SOC2 Type II compliant"; reports available to Enterprise customers under NDA; auditor and period not named
Documented by the providerrelevanceai.com ↗

SOC 2 is an attestation; GDPR is a law. Confirm scope and issuer of any certificate.

Limitations
Data region cannot be changed after org creation; Free plan "retired for new signups and existing accounts"; retention deletion "is permanent and cannot be undone"; approval tasks "remain in a pending state until approved or rejected"
Documented by the providerrelevanceai.com ↗

Collated from security, pricing (https://relevanceai.com/docs/get-started/pricing), data-retention and approvals docs

Open the full profile →

Lindy

Lindy · Agent

Documents, Workflow & Agents

Lindy is a credit-billed AI teammate set up in plain sentences that works across 1,500+ connected apps from Slack, email, iMessage and phone, holding outbound actions for approval.

Published price
How it is billed
Does it train AI on your data?
Certificates and audit reports
Open profile

Lindy

Lindy · Agent

Facts, sources and conditions

Lindy is a credit-billed AI teammate set up in plain sentences that works across 1,500+ connected apps from Slack, email, iMessage and phone, holding outbound actions for approval.
Stated by the providerlindy.ai ↗
Where it sits on the map · 1 · 1
What it is used for
Delegate recurring business tasks to a no-code AI agent
ETHORITY analysislindy.ai ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Per active user per month, each with monthly credits; shared workspace credit pool; top-ups $10 per 1,000 credits
Stated by the providerlindy.ai ↗

docs: 'You pay per user, and everyone on the workspace shares one pool of credits'; $0.01 per credit on base plans (https://docs.lindy.ai/pricing)

Published price
Free $0 ($50 in credits, 7 days); Team $49.99/user/month with 5,000 credits; Enterprise custom
Unit: USD
Stated by the providerlindy.ai ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Source conflict: pricing page metadata says 'Starts at $29.99 per user per month'; docs (https://docs.lindy.ai/pricing) name plans Plus, Pro, Max + Enterprise vs Free/Team/Enterprise on pricing page

Does it train AI on your data?
Not used for training: "Your data is encrypted, never sold, and never used to train models."
Stated by the providerdocs.lindy.ai ↗

Security page: 'Lindy and our providers do not use your data to train AI models' (https://www.lindy.ai/security)

Connects with
"1,500+ integrations + MCP"; channels Slack, email, iMessage, Chrome extension (Gmail), phone calls
Unit: count 1,500+
Stated by the providerlindy.ai ↗

Pipedream named as integrations sub-processor in privacy notice

Certificates and audit reports
SOC 2 Type II (attestation), "audited by Johanson Group"
Stated by the providerlindy.ai ↗

Page labels it 'SOC 2 Type II Certified' (https://www.lindy.ai/security); HIPAA, GDPR, PIPEDA are laws, shown as 'Compliant'/'independently verified' — not certifications. Not registry-verified

Limitations
"If the pool runs low, Lindy pauses credit-using actions"; plan credits do not roll over; free credits last 7 days; confirmation toggle only for actions with 'side effects'
Stated by the providerdocs.lindy.ai ↗

confirmation scope from https://docs.lindy.ai/testing/human-in-the-loop

Open the full profile →

Nanonets

Nanonets · Product

Documents, Workflow & Agents

Nanonets extracts fields and tables from invoices, forms and scans via configurable workflows billed per block run, routing rule-violating files to reviewers before export to ERPs, databases or sheets.

Published price
How it is billed
Where data is stored
Certificates and audit reports
Open profile

Nanonets

Nanonets · Product

Facts, sources and conditions

Nanonets extracts fields and tables from invoices, forms and scans via configurable workflows billed per block run, routing rule-violating files to reviewers before export to ERPs, databases or sheets.
Stated by the providerdocs.nanonets.com ↗

The provider’s data-extraction and pricing pages give additional scope and billing information. https://nanonets.com/data-extraction https://nanonets.com/pricing

Where it sits on the map · 1 · 1
What it is used for
Extract structured data from business documents into downstream systems
ETHORITY analysisnanonets.com ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Per block run on prepaid credits: Simple operations $0.02/run, Standard AI $0.10/run, Complex AI (data extraction, generative AI) $0.30/run; "No platform fees. No seat licenses."
Stated by the providernanonets.com ↗

Provider example: typical invoice workflow runs 4-6 blocks per document

Published price
Starter: "$50 in credits to start", no card required, then "$100/month for 100 credits"; block runs $0.02 / $0.10 / $0.30; Growth and Enterprise on quote
Unit: USD
Stated by the providernanonets.com ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. The Starter page describes both $100 for 100 credits and per-run dollar rates; confirm how the two charges relate.

Where data is stored
Enterprise plan lists "data residency (US, EU, APAC)"; privacy policy: "Our servers are located in the United States, the EU, and India"
Stated by the providernanonets.com ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Contradiction: security policy states "All customer data is stored in the USA" (https://legal.nanonets.com/security-policy); sub-processor page lists all 18 sub-processors in USA. EU region/city not named. Privacy quote from https://legal.nanonets.com/privacy

Connects with
Email import, cloud storage connectors, API; exports to Google Sheets, QuickBooks, Google Docs, PostgreSQL, MySQL, MSSQL, Python script; Growth: ERP and database integrations; Enterprise: Salesforce, SAP, Oracle connectors, SIEM
Stated by the providernanonets.com ↗

Export list from https://docs.nanonets.com/docs/how-to-setup-your-workflow

Certificates and audit reports
Provider claim: "Nanonets is SOC 2 compliant and ISO/IEC 27001 certified"; SOC 2 Type I and Type II reports on request under NDA; auditor, scope and period not named
Stated by the providerlegal.nanonets.com ↗

SOC 2 is an attestation; GDPR/HIPAA (claimed on data-extraction page, HIPAA listed as Enterprise feature) are laws. ISO issuer not named; not registry-verified

Limitations
Handwriting "must be legible to the human eye"; "Results may vary depending on writing style, image clarity, and document structure"; Starter limited to 3 users
Documented by the providerdocs.nanonets.com ↗

User limit from https://nanonets.com/pricing

Open the full profile →

Dust

Dust · Platform

Documents, Workflow & Agents

Dust lets company teams build shared AI agents over connected knowledge sources and tools, choosing among 20+ models per task, with stake-level approvals before agents take actions like sending email.

Published price
How it is billed
Where data is stored
Does it train AI on your data?
Open profile

Dust

Dust · Platform

Facts, sources and conditions

Dust lets company teams build shared AI agents over connected knowledge sources and tools, choosing among 20+ models per task, with stake-level approvals before agents take actions like sending email.
Stated by the providerdust.tt ↗

Gmail action approvals follow the tool guide; the model count follows the pricing page. Confirm settings for each enabled tool.

Where it sits on the map · 1 · 1
What it is used for
Build team AI agents over company knowledge and tools
ETHORITY analysisdust.tt ↗

Task classification by ETHORITY; match it to your intended use.

How it is billed
Per seat per month with monthly credit allowance (Pro 8,000, Max 40,000 credits per seat/month); programmatic usage $0.01 per credit; Enterprise workspace-pooled credits
Stated by the providerdust.tt ↗

Credits reset each billing period, no rollover; overage capped by admin

Published price
Free €0 (500 lifetime credits); Pro €24 per seat/month billed yearly; Max €120 per seat/month billed yearly; excl. VAT; Enterprise on quote
Unit: EUR per seat per month
Stated by the providerdust.tt ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Business plans for teams up to 100 people; yearly toggle 'Save 20%'. Page meta description gives $24/$120 (currency inconsistency on same page)

Where data is stored
"Host in the EU or US to meet your regulatory needs"; US and EU data residency on Business and Enterprise; single-tenant deployment Enterprise only
Stated by the providerdust.tt ↗

Ask which cloud region and hosting provider apply to your account.

Does it train AI on your data?
Not used for training: "Your data is never used to train models."; "No data is stored by third-party model providers."
Stated by the providerdust.tt ↗

Enterprise page: "Zero model training on your data"

Connects with
Connections, MCP servers, Open API; named: Notion, Slack, Salesforce, GitHub, Gmail, Outlook, Zendesk; homepage "70+ connectors"; Business plan up to 3 connectors and 5 remote MCP servers, Enterprise unlimited
Stated by the providerdust.tt ↗
Where the provider's own sources disagree

The provider’s own sources say different things here. Inconsistent counts across own pages: pricing 'Connectors to 20+ sources' vs homepage '70+ connectors' (https://dust.tt/)

Certificates and audit reports
Provider claim: "GDPR Compliant & SOC2 Type II Certified. Enables HIPAA compliance." No auditor, scope or report period on pages read
Stated by the providerdust.tt ↗

SOC 2 is an attestation; GDPR and HIPAA are laws. Confirm the report's scope and period.

Limitations
"Dust is not designed for bulk email campaigns"; "send_mail is disabled by default on existing workspaces"; Business plan capped at 3 connectors, 5 Spaces, teams up to 100
Stated by the providerdocs.dust.tt ↗

Plan caps from https://dust.tt/home/pricing

Open the full profile →

Compare baseline: three billing units

Per action, per seat plus credits, per user and app: three units that scale very differently.

OfferingBilling unitData locationTrainingSource
Workato GeniesPer Genie actionEU in-region optionNot used for trainingWorkato Genies pricing and trust
DustPer seat/mo + creditsEU or USNot used for trainingDust pricing and security
Appian Agent StudioPer user/app/monthEU AWS regionsNot used for trainingAppian Agent Studio documentation

Registry facts as stated on each provider's own pages, read 20 Oct 2026. Add your own volumes in Compare before deciding.

Rules and dates

The dates that apply once an agent writes, decides or routes cases.

  1. 2 Aug 2026

    Art. 50: people must be told when they interact with an AI system.

    Reg. (EU) 2026/1744

  2. 1 Jan 2027

    Colorado and California duties on automated decisions apply for covered uses.

    State law, CO and CA

  3. 2 Dec 2027

    Annex III high-risk duties apply, incl. employment, credit, education and justice.

    Reg. (EU) 2026/1744

  4. 2 Aug 2028

    High-risk duties apply to AI in regulated products.

    Reg. (EU) 2026/1744

Read the evidence

The Global Market Study 2026/27 names "agent washing" and stalled pilots as the problems of this area.

Related insights

Our long read on gating agents, plus why tool access is not authority.

Read the area analysis →
Access to a tool does not give an AI agent the right to act.

Access to a tool does not give an AI agent the right to act.

How to define what each AI agent may do: by action, limit, time and consequence, rather than by the tools it can reach.

See the map on one page →
A marketplace listing does not make an AI agent trustworthy.

A marketplace listing does not make an AI agent trustworthy.

When you buy AI agents, keep identity, offer, payment, evidence and trust apart, and grant rights only after purchase.

See the map on one page →
AI does not scale by itself. Redesign the work.

AI does not scale by itself. Redesign the work.

Start with one objective, choose the simplest approach for each task and measure the cost of every result you accept.

See the map on one page →
A list of AI agents does not control them.

A list of AI agents does not control them.

What controls AI agents in daily operation: clear rights, a record of how well each fact is supported, checks matched to the risk, data limits and alerts when something changes.

See the map on one page →
AI rules move from documents into daily operation.

AI rules move from documents into daily operation.

Why AI agents, tools and constant change move AI governance – the rules and responsibilities for AI – into the systems that run your AI every day.

See the map on one page →

Implement it with ETHORITY

Enterprise AI Opportunity Case

Priced after scoping

Compares real options, including doing nothing, models the economics and the assumptions that can break them, and recommends: start, change, test first or stop.

Scope and delivery by agreement

See what this package includes →

AI Trust Pilot

€25,000 net · one-time

Runs one agreed AI use case under real conditions in one department, with owners, evidence, review and stop conditions set before it starts.

Request scope and delivery

See what this package includes →

AI Governance Setup

€19,500 one-time · net

Sets named owners, bounded authority, current evidence and a defined response to change for the AI you run.

Scope and delivery by agreement

See what this package includes →

Buyer questions

How do we tell a real agent from a relabelled chatbot?

Ask what it may do on its own, under which limits, and who answers for the result. Tool access is not authority sets out the four limits: action, value, time and consequence.

Why do so many agent projects get canceled?

Gartner names escalating costs, unclear business value and inadequate risk controls. A business case with a stop/go gate and a cost per accepted case addresses all three.

How are workflow and agent offerings billed?

In at least eight units across 11 profiled cards: per workspace, seat, action, run, document or annual volume. Workato Genies, for example, bills per Genie action.

Can our documents stay in the EU?

Often, but check the plan. Eight of 11 profiled offerings name an EU option; Doxis AI.dp states Amsterdam as its default.

Should we buy agents from a marketplace?

Only with identity, evidence and authority checked separately. A marketplace listing is not trust explains the five checks.

The evidence at a glance

US$65.5bn for agents. Gate every pilot.
Download the figure ↓

ETHORITY · LONG READ

Gartner: 40% of agent projects face cancellation. Scope authority first.

Agent spending is set to quadruple to US$65.5bn by 2027, while Gartner expects over 40% of agentic projects to be canceled. The Good AI Prism shows what separates the survivors: authority, cost per case and data terms.

Agents are where AI budgets are heading. Gartner's September 2026 spending forecast puts spending on AI agents and assistants at US$16.5bn in 2025, US$29.2bn in 2026 and US$65.5bn in 2027. That is roughly four times as much in two years. Gartner now reports agents and assistants as their own market, separate from AI software.

The same analyst house expects many of these projects to fail. In its June 2025 forecast, Gartner predicted that over 40% of agentic AI projects will be canceled by the end of 2027, citing escalating costs, unclear business value or inadequate risk controls. Both forecasts can be true at once. Money is flowing in faster than organisations learn to run agents.

Many pilots, little scale

Survey data shows how early the market still is. In the McKinsey State of AI 2025, 23% of respondents said their organisation was scaling agentic AI somewhere, and a further 39% were experimenting. In any given business function, no more than 10% reported scaling agents. The August 2026 edition shows the gap widening by size: 40% of large organisations scale agents, against 22% of smaller ones.

10%. No business function had more than one in ten organisations scaling AI agents in McKinsey's 2025 survey.

Governance lags further. The Global Market Study 2026/27 records that only 21% of organisations have mature agent governance (Deloitte), and that 26% of large US firms see their AI costs in real time (KPMG AI Pulse, Q2 2026). Agents that act on documents, tickets and systems without a named owner and a cost line are exactly the projects Gartner expects to be cut.

"Agent washing" makes choosing harder

Gartner also estimated that only about 130 of the thousands of vendors marketing agentic AI offer real agentic capability. The rest relabel chatbots, assistants or robotic process automation. The study calls this "agent washing" and lists it as the main business problem in this area, next to pilots that never ship.

For a buyer, the label "agent" says little. What matters is what the system may do on its own, under which limits, and who answers for the result. ETHORITY's insight Tool access is not authority makes the point directly: scope each agent by action, limit, time and consequence, not by the tools it can reach. Bought agents need the same discipline. A marketplace listing is not trust separates identity, offer, payment, evidence and authority, and grants authority only after purchase.

~130 of the thousands of vendors marketing agentic AI offer real agentic capability, by Gartner's estimate (Jun 2025).

What the Prism shows about workflow and agent offerings

The Good AI Prism places 24 AI offerings and one provider record (ABBYY) in Documents, Workflow & Agents. They range from intelligent document processing to agent builders and enterprise automation platforms. Eleven carry a full registry card with sourced decision facts, read from provider pages on 20 Oct 2026.

Exhibit: eleven profiled workflow and agent offerings

Decision factWhat the 11 cards show
Billing unitAt least eight different units, from per workspace and per seat to per action, per run and per document
Training on your data7 state customer data is not used for training; 3 leave it to be asked; 1 offers opt-out on certain plans
EU data location8 name an EU region, EU default or EU option
Published price7 publish a list price, from free tiers to US$18,000 a year
Agent standards3 name the Model Context Protocol (MCP)

Source: Good AI Prism Registry, provider pages read 20 Oct 2026.

Billing is the first trap. Workato Genies bill per Genie action. Nanonets bills per run, without seats. Rossum bills annually by volume, from US$18,000 a year. Dust charges €24–120 per seat a month plus credits. Agents that act many times per case make volume the main cost driver. A pilot priced per seat can turn into a production bill priced per action.

Data location is better documented here than in most areas. Eight of the eleven name an EU option, including Doxis AI.dp with an Amsterdam default and Appian Agent Studio in EU AWS regions. Training terms are less complete: three providers state nothing clear on training, so the question goes into the contract.

Interoperability is becoming a buying criterion. Three profiled offerings name the Model Context Protocol, among them Workato Genies. Verified relations in the Prism show many applications resting on a few hubs, MCP among them. One protocol or platform change can move many agents at once.

Scenario. A team of 25 on Dust pays €600 a month at €24 per seat, or €3,000 at €120, before credits. A per-action plan such as Workato Genies grows with cases, not people. Price the pilot at production volume and divide by accepted cases.

Rules arrive while agents spread

Agents that write, decide or route cases touch the EU AI Act. Under Regulation (EU) 2026/1744, Article 50 transparency duties apply since 2 Aug 2026. High-risk duties for Annex III uses, such as recruitment, credit and education decisions, apply from 2 Dec 2027. An agent that pre-screens applicants or loan files is judged by its use, not by its label. In the United States, Colorado and California duties on automated decisions apply from 1 Jan 2027 for covered uses.

The scaling question is organisational as much as technical. ETHORITY's insight AI does not scale by itself draws on a McKinsey survey of 696 companies (Jun 2026) linking operating practice to AI scale: start with one objective, pick the simplest mode per task and measure the cost of an accepted result. Not every workflow needs an agent. Many need a well-designed document pipeline with a human decision at the end.

Measure the right outcome

The study names three outcomes for this area: cycle time, straight-through rate and cases in production. They are harder to fake than demo metrics. A document workflow that processes most invoices without touch, at a known cost per case, is a result. An agent that "can" process invoices is not.

Put a business case with a stop/go gate in front of every agent pilot. Define what the agent may do alone, at what value limit, and when a human signs. Record the model and the platform underneath. Then compare offerings on cost per accepted case at your own volume.

What to do Monday

  1. List every agent and automation already running. Include tools bought by departments. For each, record owner, actions it can take, systems it touches and monthly cost.
  2. Write the authority for one agent. Actions allowed, value limits, time window, escalation rule and who signs the consequence. If nobody can sign, the agent is not ready for production.
  3. Price the pilot as production. Convert per-seat, per-action and per-run pricing into cost per accepted case at expected volume.
  4. Ask three questions in writing. Where is our data processed? Is it used for training? Which models and protocols does the agent depend on?
  5. Set the gate before the pilot. Agree the cycle time, straight-through rate and cost per case that decide go or stop. The AI Trust Pilot offer runs one use case this way, with stop conditions agreed before it starts.

The registry cards for this area are kept current in the Good AI Prism, with every decision fact sourced and dated, so a shortlist can start from evidence rather than from an "agent" label.

Sources and further reading

Put the thinking to work

AI Opportunity Case →

A defensible proceed, test, redesign, defer or stop decision. The fee is independent of which outcome the evidence supports.

YOUR NEXT STEP

Discuss your question with Sten Franke.

Bring your business question or the figures you already know. ETHORITY investigates within the agreed scope; together with Sten Franke you agree the next piece of work.

Draft your request by email →