Information Security skill and admin review
Every Executive Agent includes an Information Security skill for classification, safe handling, access control, incident response and policy drafting. The skill advises; server controls enforce organisation rules.
- Owners configure detection categories in Admin security. Monitoring records potential breaches and allows the action; restricted information is handled manually. Active board approvers can review evidence and resolve incidents. Staff can request release authorisation at /security-requests. Owners or board approvers review the recipient, purpose and evidence, then approve or reject with notes. Self-approval is prevented; decisions never send or publish information.
- The sensitive-information queue records staff ID, email at capture, timestamp, document name when supplied, categories, detected excerpts and an evidence checksum. Passwords and API keys are masked; review access is audited.
- Covered actions include extracted document imports, document saves, supported document exports, AI text requests, knowledge indexing, web research and website publishing. Unreadable scans require text extraction; no retroactive scan of existing files is performed.
- Detection is pattern-based and may miss sensitive content. Events older than 30 days are removed on subsequent inspection or admin activity. General staff content remains private.
1. Start with a clear brief
Sign in, choose a workspace, and describe the decision or output you need. Include the audience, time period, available inputs and desired format. For UAE work, name the emirate and whether the entity is mainland, a free zone or offshore.
- State the objective: what should the result help you decide or do?
- Provide relevant facts and distinguish confirmed figures from assumptions.
- Specify the output: a decision memo, comparison table, checklist, draft document or website.
- Ask for evidence gaps and questions when information is missing.
2. Work with the Executive Council
The Council brings together CEO, CTO, CCO, CFO, COO, CISO, Legal, CRO, Audit, CHRO, Data and PMO perspectives. Create a session with your brief, run the Council, then review individual contributions and the combined recommendation.
- Follow progress while members analyse the task. A partial result identifies perspectives that did not finish.
- Review findings, recommendations, risks, assumptions and cited evidence before acting.
- Use Quick reply for a streamed answer based on the existing Council report. Choose Full consultation for fresh replies from every permitted executive, or select one executive for a direct streamed reply. Regulatory questions still run the official-source research checks.
- Type /CFO followed by a question for finance, /Legal for legal issues, or /All to ask the full Council. A command on its own selects the recipient.
- Use Stop to cancel an active request. Completed contributions may remain available; check the session status before retrying.
3. Automatic official UAE regulation research
For new Council runs and follow-up questions, Najem AI checks whether the prompt needs current UAE regulation research. If it does, the Council searches relevant official-source domains and reads available source material before the executive responses. The research findings and citation links are shared across the Council and its final synthesis.
- Include the activity, emirate, entity type and legal issue to help select the correct authority.
- Research covers sources for federal, mainland, free-zone and offshore frameworks; their rules are not interchangeable.
- The research brief asks for instrument titles, articles, dates, amendments and the distinction between laws, guidance and proposals.
- Ordinary prompts can skip web research. If required research fails, the Council shows a retry message.
- This is task-specific research, not continuous monitoring or a complete copy of every UAE rulebook. Review linked publications and any stated gaps.
- Research uses your existing AI allowance. Avoid personal identifiers or confidential details in prompts that need public web research.
4. Add specific official sources
Open Workspace plugins, expand Official UAE sources, and search by authority or topic. Filter by emirate, jurisdiction and source type. The directory distinguishes legislative collections, rulebooks, guidance and authority portals.
- For a web page, choose Use this URL, then Read & attach. Open the official publication first when you need a specific article rather than a portal home page.
- Attach up to three pages. Review the retrieved text, URL and retrieval date; a long page may be an excerpt.
- On the Council page, attached text is shared with all executives. Each run or question keeps a consistent source set; attachment changes apply to the next request.
- For PDF entries, open and download the publication, then import its text into Company Knowledge or a document workspace.
- Source selections are scoped to your account and current workspace. Reattach them after navigating away. A login-only or blocked portal may require a manual extract.
5. Build and use Company Knowledge
Company Knowledge stores a private, account-specific library of reference documents. Add a company overview, policy, report or meeting notes so you can retrieve relevant passages for a task.
- Open Company Knowledge, import a supported file or paste text, add a title, review the content and choose Add to knowledge.
- The library supports up to 20 documents, with 12,000 characters per document. Split longer documents into clearly titled sections.
- Supported imports include text-based PDF, Word, Markdown, text and CSV. Check the extracted text before indexing.
- In Research & company knowledge on the destination workspace, enter a question, select Company knowledge and choose Find evidence.
- Review the passages, then select Use this evidence in subsequent AI requests on this page. Adding a document to the library alone does not attach it to every task.
- Use Remove in Your library to remove a document and its search index. Previously generated reports can still contain material already used.
6. Research and create documents
Use Deep Research for an evidence-led brief and Docs for drafting and editing. Define the question, audience and scope, supply relevant inputs, then review the output before exporting or sharing.
- In the evidence panel, Search the web retrieves a brief with source links. Review and explicitly include it for subsequent requests on that page.
- Tavily is used when configured; otherwise the evidence panel uses the available AI web-research connection. Council automatic regulation research uses its official-domain research path.
- For Docs, start with an outline or template and specify tone, length, language and required sections.
- For policy drafting, choose a template in the Policies category or ask Najem AI to draft a policy. Standard starting templates cover HR, data protection, information security, AML, procurement, whistleblowing, conflicts of interest, business continuity, responsible AI use, health and safety, and records retention.
- Policy drafts include document-control and approval fields, purpose, scope, responsibilities, requirements, procedures, exceptions, training and review. Provide your organisation, jurisdiction and policy owner; unknown dates, thresholds and legal requirements should remain marked for confirmation.
- Automatic policy guidance applies to drafting requests in Chat, Docs and Council. Council regulation research runs when needed; a template alone does not verify compliance or make a policy approved. Review and approve the final document through your organisation’s process.
- Use Slides and Sheets for presentations and tabular work. Verify dates, amounts, formulas and claims against source records.
- Scanned documents may need OCR. Docling integration requires an owner-configured hosted service; existing imports remain available when it is not connected.
7. Build, save and publish a website
Open Websites to create a page with an AI brief, a starter layout or the visual editor. Describe the audience, sections, brand style and action visitors should take. Review the content and layout before publishing.
- Use the visual editor to edit page elements and inspect desktop, tablet and mobile layouts. The code editor is available for HTML and CSS changes.
- Save keeps your draft in your account. Export HTML downloads a standalone page.
- Publish creates a publicly readable snapshot with its own link. Only publish content you intend to make public.
- Later draft edits do not update the public page until you publish again. Use Unpublish to remove the published snapshot.
- Public pages and exported HTML exclude JavaScript and forms. A form drawn in a private preview is not a working public payment or contact form.
8. Plans, agents and connections
Use the pricing and subscription screens to review the available plans and select Executive Agents for your plan. Starter includes 3 Executive Agents and 3 staff seats; Professional 6 and 6; Business 9 and 9; Executive 12 and 12. The owner is separate. Staff and board approvers share the seat allowance; active accounts and unexpired invitations count. Check the displayed billing interval, total and selected agents before continuing.
- Plans offer selections of 3, 6, 9 or 12 Executive Agents. Use the live pricing page for current charges and annual billing details.
- For staff permissions, open Team access and create your organisation team. Select a staff email and grant the appropriate Executive Agents. With Gmail connected, choose Create account & email login: Najem AI creates a new account, uses the email as the login ID, generates a strong password, and emails it directly to the staff member. New staff immediately receive only their assigned agents.
- Staff should change the emailed password after signing in. Passwords are never shown to the owner or stored in team records. Gmail accepting an email does not guarantee inbox delivery; check spam if needed. If email delivery is unconfirmed, check the team list and use Forgot password instead of creating another account.
- Existing users keep their current passwords. For existing users or when email is not connected, choose Create invitation and share its link yourself. The staff member accepts while signed in with the matching verified email address. Invitations expire after seven days. Saving an unaccepted invitation refreshes its link; share the new link.
- Only the owner can appoint board approvers. Owners and appointed board approvers can grant or revoke staff agents; staff cannot change their own permissions. Board approvers cannot promote staff to board or edit their own grants.
- A CFO-only staff member sees only the CFO agent. All permitted agents asks only the agents granted to that account. Other features remain available to all staff.
- Use Suspend agent access to block a member from the Council, or restore their access when appropriate. New requests check permissions in the backend, and the open Council refreshes its permission state periodically.
- Staff content stays private. Neither owners nor board approvers gain access to staff documents or reports through permission management. Existing Council reports containing agents outside a member’s grant are hidden.
- Agent selection is a subscription preference; consult the workspace and billing screens for current access and subscription status.
- A submitted checkout is not proof of an active subscription. If checkout or billing configuration is unavailable, follow the displayed message.
- Workspace plugins shows connected services and setup requirements. A service labelled App setup required needs configuration before you can connect it.
- Never paste API keys, passwords or payment-card details into an AI prompt. Use the provider or designated secure settings.
9. Workflows and scheduled work
Use AI Work for multi-step business tasks and Scheduled Tasks for timing-related work. Define the inputs, steps, expected output and responsible reviewer before running a process.
- Keep each step specific and check that its required connection is available.
- Distinguish a generated plan from an executed action. Confirm completion through the workspace status and actual output.
- Scheduling and execution depend on the available runner and configured integrations. A saved task does not establish that it has run.
- For external communications or changes to business systems, review the proposed action and use the relevant approval controls.
10. Resolve common problems
Start with the message shown in the workspace. Keep your original brief and any completed output while resolving the issue.
- Research failed: retry, narrow the legal question, and state the jurisdiction. If an official portal is blocked, attach a readable publication or import its text.
- No knowledge matches: check that indexing finished, use terms from the document, or split a long document into focused sections.
- Import failed: confirm the format and size, try a text-based export, and review whether the file requires OCR.
- Model or usage error: check the selected model, available allowance and connection status. Avoid repeatedly restarting the same failing request.
- Website changes missing: save the draft and publish again; confirm you are viewing the latest public link.
- Sign-in problem: use the login page and available recovery options. Record the error without sharing credentials.
A brief to try
We plan to open a mainland consulting company in Abu Dhabi. Research the relevant official licensing requirements, identify the responsible authorities, and distinguish confirmed requirements from questions we must resolve. Ask the Council for a phased action plan with source links, owners and dependencies.
Illustrative example. Replace assumptions with your approved business information.
Common questions
Do I need to attach regulations before asking the Council?
No. The Council automatically checks whether your prompt needs UAE regulation research. Manual attachments are optional when you want a particular document or provision considered.
Does every executive search the same websites separately?
No. Relevant regulation research is gathered once for the request and shared with the executives and the final synthesis.
Are all company documents automatically sent with every request?
No. Search the library from the evidence panel and explicitly include the passages you want to use. Evidence selection applies to the current account and page.
Does a public website expose my private drafts or knowledge library?
Publishing creates a separate public page snapshot. Your knowledge library and saved drafts are not made public by that action. Any text you place in the published page itself is public.