Lindy

Are scope, spend, and authority enforced while the agent runs?

Publishes an enforced authority limit: "Nothing irreversible happens without your approval," with outside-impact actions (sending email, updating a ticket, posting, publishing) waiting for a named approver, and Slack scoping that excludes archived channels and personal DMs. Short of 3 because no spend or budget cap is published and the enforcement is a vendor claim with no independent verification.

Counts Runtime governance, Human oversight and Permission scopes, each cited below.

Is there a tamper-evident record of what it actually did?

A record is claimed to exist and nothing more: the plan feature list names "Audit logs" with no retention period, no scope, and no tamper-evidence or hash-chaining claim. A bare feature bullet supports the existence of a log, not a customer-reviewable or tamper-evident trail.

Counts Audit trail, each cited below.

Are compliance obligations attached per engagement?

Names SOC 2 Type II, GDPR, HIPAA and PIPEDA with encryption in transit and at rest, and offers HIPAA with a signed BAA on the Enterprise tier — a per-engagement instrument. Short of 3 because every certification is self-declared on the vendor homepage with no certificate, auditor or report date published.

Counts High-risk domains, Compliance certifications and Regulatory alignment, each cited below.

Does payment depend on a verified result?

Payment is decoupled from result: plans start at $29.99 per user per month with a 3,000-credit allocation pooled across the workspace, and credits are consumed by work performed regardless of outcome. No escrow, milestone release, clawback or outcome-linked term is published.

Counts Price point and Pricing model, each cited below.

Can the deployment be insured, and is the customer indemnified?

No public evidence found. The pages checked publish no AI liability cover for a customer deploying Lindy, no named carrier, no policy limits, no customer indemnity and no liability cap.