Työäly Control · incoming work, prepared for people

Control reads. It proposes. People decide.

Työäly Control brings incoming work into an AI-assisted workflow. It reads where the work arrives, prepares each item, proposes what to do with it, asks Työäly Gate whether the proposal may stand, and shows your people the summary, the proposed action and a draft. Nothing is sent or changed without a person.

Available today: a Microsoft 365 mailbox pilot in Observe mode.

Updated 10 October 2026 · How Control works · Console

What Control is for

Most of a company's work arrives as messages: a customer asks whether a product fits, a supplier sends an invoice, someone complains, a newsletter lands. Reading, sorting and answering takes a person's attention every day, and the urgent message waits behind the unimportant one. Control takes the first pass: it works out what each message asks for, prepares the next step, and makes visible what needs a person.

Control is a product of Työäly, not a general assistant. It works on one source of incoming work, applies your rules before any model sees a message, and asks Työäly Gate before a proposal counts. Today that source is a Microsoft 365 mailbox. Other sources are directions to discuss with us, not features you can switch on.

An example

Illustrative: the messages are invented, the steps are the ones Control performs on every message.

A sales inquiry

A message asks whether your product fits a team of forty and what it would cost.
Control prepares it: the sender's own words, nothing quoted, identifiers replaced.
It proposes: sales, normal urgency, reply, with a draft that answers what the message itself allows and leaves the price to your team.
Gate decides: allow. The proposal fits the rules and the evidence.
A person reads the draft in the console, adjusts it and sends it from the mailbox. The outcome is recorded.

An invoice

A supplier sends an invoice as a PDF attachment.
Control reads the attachment as text and proposes: invoice, forward to finance.
Gate decides: allow.
A person forwards it. Recorded.

A complaint with a legal word

A message mentions a lawyer and a consumer dispute.
A rule sends it to a person at once: no proposal, no draft, no Gate decision.
The daily report says: to a person, by rule.

What your people receive

A summary

One or two sentences per message: what it asks for, how urgent it is, in which language. No names, no identifiers.

A proposed action

Reply, forward, archive, categorise, leave, or to a person, with the reasons.

A draft reply

When the proposal is a reply: complete, in the message's language, without placeholders. A draft never commits your company to a date, a delivery time, a price or an outcome, and states no company fact the message does not contain.

Gate's decision

Allow, review, deny or more information, with reason codes, for every proposal Control makes.

The console

Under your organisation's own sign-in: every message's summary, proposed action, draft and Gate's answer, as they happen.

A daily report

One mail every morning: what arrived, what Control proposed, what Gate said, what needs a person. Subjects and sender domains only; no addresses, no drafts.

Available today, and what is planned

Control runs today as a pilot on one Microsoft 365 mailbox per company, in Observe mode: it proposes, records and reports, and nothing is written to the mailbox. Your people act in the mailbox as before, with the summary and the draft at hand in the console.

Connecting the mailbox is one sign-in with the account that reads it, done together with us during onboarding. Nothing is installed. Some organisations require their administrator to accept the sign-in once.

Assist (planned)

Control puts the draft reply into the mailbox as a draft your person sends, and categorises messages. Needs a new accept with write permission and the agreement figures of the Observe weeks.

Act (planned)

Control sends the reply itself when Gate allows, per action type, under a written agreement.

Boundaries and trust

Read-only in Observe. The permissions are read-only and Control has no code that writes to a mailbox. Nothing is sent, moved, labelled or deleted.
People act. Control proposes; a person decides and acts. Gate's allow is a decision about the proposal, not an action; neither Gate nor Control executes anything in Observe mode.
Rules before any model. Personal identifiers, the words of a legal matter or a complaint, and text that tries to instruct the model send a message to a person before any proposal is made. The model may add to that list; it cannot shorten it.
Identifiers replaced. Finnish personal identity codes, IBANs and payment card numbers are replaced before any model sees the text. The sender's address never leaves Control; its domain does.
Records for 90 days. Per message: the subject with identifiers replaced, the sender's domain, the time, the proposal, the draft and Gate's answer. Never the sender's address or the body. Deleted earlier on request.
Where the data goes. Control runs on Amazon Web Services in the EU. Our privacy notice names the processors and what each one sees.

Getting started

Tell us which mailbox the work arrives in and what your people do with it today. We go through the rules that send a message straight to a person, connect the mailbox together with you, and read the first report with you.

Scope, assessed-message volume, included services, duration and price are agreed in writing before the pilot starts.

Questions

Does Control answer our customers?

Not in Observe mode. It prepares a draft; a person sends it, or does not. Sending by Control itself is a later mode, per action type, under a written agreement.

What does the model see?

The prepared text: the sender's own words with identifiers replaced, the subject, the sender's domain and the text of attachments. Not the sender's address and not your other mail. The model runs in the EU and its platform keeps nothing.

What happens with an unclear or sensitive message?

It goes to a person: by rule for personal data, legal matters, complaints and suspicious instructions; by the model's own judgment when it is unsure; and Gate can hold any proposal for review.

Do we need to change anything in Microsoft 365?

No installation and no settings. One sign-in with the account that reads the mailbox; some organisations need an administrator to accept it once.

Can we stop?

At any time. Changing the account's password or removing the application stops Control at the next run, and the records are deleted on request.

Control supports your people's decisions; the responsibility for an action stays with the company that takes it. Check questions about the processing of personal data with your own advisor; our privacy notice describes what Control processes and where.