Skip to content
Intlexl

Enterprise

Governance your security team can inspect.

For the IT, security and PMO leaders who assess a platform first: who can see what, what gets recorded, what AI is allowed to do, and how other systems connect.

Book a demoRead about security
Layers of access
4
Organisation, item, admin, boundary
Agent autonomy tiers
3
Observe, Propose, Act
MCP token scopes
4
Read, edit, structural, admin
MCP tools
100+
One audit log for every call

The review questions

What an evaluator asks, and where the answer is.

Who can see what

Roles from a separate access service, then owner, editor or viewer on each workspace, sheet, dashboard, report and resource manager.

What gets recorded

An activity log for edits and structural changes, row history, and a separate audit log for MCP calls.

What AI may do

It acts within the signed-in person's permissions. Structural and destructive steps ask first.

How systems connect

An MCP server with scoped, revocable tokens, plus Smartsheet, Microsoft Project and Excel import.

Organisation boundary

Access across organisations is denied.

Deletes you can undo

Deleted workspaces, sheets, dashboards, reports and resource managers go to a recycle bin and can be restored.

Access

Sharing you can read at a glance.

Every item shows who holds owner, editor or viewer access, and administrators keep an override that sits apart from everyday roles.

  • Per-item roles

    Set on workspaces, sheets, dashboards, reports and resource managers.

  • Invitations with email verification

    People join an organisation through an invitation.

  • Automations follow their owner

    They run on the owner's access and stop if it is removed.

See security and governance
Share ERP Transformation

  • Dana Whitfield

    dana.whitfield@company.com

    Owner

  • Marcus Reyes

    marcus.reyes@company.com

    Editor

  • Priya Raman

    priya.raman@company.com

    Editor

  • Grace Okonjo

    grace.okonjo@company.com

    Viewer
Activity log
Today

  1. Priya changed % Complete on Billing reconciliation QA

    09:16

  2. Dana approved a risk proposed by Risk and RAID

    09:21

  3. Marcus wrote 2 cells through an MCP token (edit scope)

    09:34

  4. Dana shared ERP Transformation with Grace Okonjo as Viewer

    09:40

Autonomy

You set how far each agent may go.

Each of the six PM agents runs at a tier you set for your organisation. Act is off until an administrator turns it on.

  • Observe

    The agent watches and reports findings.

  • Propose

    It suggests a change and waits for Approve or Dismiss.

  • Act

    It applies the change, enabled by an administrator only.

See every agent

Needs a decision

Risk and RAIDAutomatedPropose tier

Log a risk: cutover runbook review is slipping

ERP Transformation. It was due 23 Sep and is still in progress, ahead of the Phase 2 Go-Live on 19 Oct.

If you approve: a row is added to the Risk Register, owned by Tomas Bauer.
ApproveDismiss
Risk Register
RiskRatingOwner
Phase 2 schedule exposureHighDana
Firmware certification delayHighMarcus
Cutover runbook slippingHighTomas

Connectivity

One interface for outside AI, with your rules on it.

Clients such as Claude connect over MCP with a token you scope and can revoke. Every call is checked against the same permissions a person would have, and logged.

MCP client · connected to Intlexl

FAQ

Questions people ask.

People belong to an organisation and hold roles made of permission keys, managed by a separate access service. Workspaces, sheets, dashboards, reports and resource managers each have owner, editor and viewer access per person, and access across organisations is denied.

Yes. Cell edits, structural changes and MCP writes go to an activity log. MCP calls have their own audit log, and agent runs and tool calls keep a history with retention you set. Automations run on their owner's access and switch off if the owner loses it.

Structural and destructive actions always ask first. Everyday edits by the assistant, such as updating a cell, run inside the signed-in person's permissions and are logged. PM agents run at Observe, Propose or Act per agent, and Act is available only where an administrator enables it.

Through the built-in MCP server, which offers more than 100 tools. Each client uses a personal token with a read, edit, structural or admin scope that can be revoked or refreshed. Data can also arrive through the Smartsheet, Microsoft Project and Excel import routes.

We walk through roles, sharing, the activity log, MCP tokens and agent tiers on a workspace set up like yours, and answer your reviewers' questions directly.

Put your review questions to us.

Bring your security and IT reviewers. We will walk through roles, sharing, the activity log, MCP tokens and agent tiers.

Book a demoExplore the platform