EMILIA
Hire the AI.
Keep your rules.
EMILIA gives AI the rules every new hire gets, and checks them at a gate the AI can't go around.
The live demo: approve an AI's payment with Face ID, then watch a forged amount fail the check.
A short story about AI at work
Rosa pays the bills
For 22 years she has paid the bills at her family's flooring company, and trained everyone who touches the money.
An illustrative story with AI-generated images. Rosa, her company and every amount in it are made up. The trouble she meets is real.
Rosa's rules
Every new hire
gets rules
- Pay approved bills up to $10,000
- Anything bigger waits for Rosa's yes
- Pay suppliers at their usual account
- Write everything down
This year the new hire is an AI. It reads the bills and pays them, even at 2 a.m. And like any new hire, it can be fooled.
Tuesday, 2:14 a.m.
“We've changed banks”
Please send this month's $8,400 to our new account. The bill is real. The account belongs to a scammer. It is under the $10,000 limit, so a check on the amount alone would wave it through.
This part is real
People already
fall for this
reported lost to business email compromise in 2025.
FBI Internet Crime Complaint Center, 2025 Annual Report: $3,046,598,558.
Rosa is asleep
She can't watch
it all night
A good scam can talk an AI out of its instructions. So Rosa's rules sit at a gate it can't talk its way past.
Meet EMILIA
EMILIA is the gate
This amount, to this account.
Checks the rules.
Goes through.
Stops, with a reason.
The AI doesn't pay anyone directly. It asks, and the gate checks that exact payment: the amount, and the account it is going to. The gate takes those details from the company's own records, never from the AI's say-so. A bigger payment can wait for a person to approve that one payment.
No way around
The new hire never
holds the keys
The gate holds the bank login. The AI can ask, but it can't go around the gate or raise its own limit. If the bank goes quiet in the middle of a payment, the gate marks it unfinished, so it can't be blindly sent twice. The money never passes through the gate. It stays in the bank.
This covers the payment paths a company connects through EMILIA.
2:14 a.m., at the gate
Same bill.
Wrong account.
to the supplier's usual account
to a new account
Stopped: not the usual account.
The next morning
Nobody grades their
own homework
Rosa reads why the payment stopped and calls the supplier on the number she has had for years. They never changed banks.
Every yes and no is written down. Each payment the gate allows gets a signed receipt her accountant can check on their own computer, even offline, without asking the AI company.
A check shows a receipt is genuine and unchanged. Which signers to trust stays the accountant's call.
Check a receipt in your browserThe business
Free blueprint.
Running it is our job.
The EMILIA protocol and a reference Gate are open source under the Apache-2.0 license. Anyone can read how the gate works and build on it, because a gate you are asked to trust should be one you can inspect. Our business is operating the gate for companies and connecting it to the systems they already use, scoped for each deployment.
The public repository records 10,912 automated tests, 340 conformance vectors and 35 executable security claims. Those are engineering results, not customer adoption or proof of a complete deployment. No customer savings or ROI are claimed.
Where we're headed
A gate wherever
AI does real work
We start with supplier payments at the finance teams of larger companies. The aim is a gate like this wherever AI does real work for a business, earned one company at a time.
Also from EMILIA: the AI workforce alpha, a private local preview.