Your Stuff, Across The Platform
Personal Agent is the one agent that's hard-scoped to the asking user. Search your bookmarks by title or note, list your unfinished drafts, see what's open and overdue on your tasks, and triage your notification inbox — all from chat. It will also bookmark a record, edit a note, or mark notifications read with a confirmation step. Nothing about anyone else.
Why Your Own Stuff Is The Hardest Thing To Find In A Big Platform
The platform has tens of thousands of records. Yours are a handful — but they're scattered across workspaces, wikis, tasks, the inbox, and a dozen apps. Personal Agent answers "where's my stuff?" without making you click through every surface.
Your Bookmarks Live In Ten Different Apps
You bookmarked a wiki, a workspace message, a recognition post, a recruiting job, and an SOP — and you remember none of them. The platform has the data; finding it means visiting each app's bookmark list one by one. Most people just re-find the thing from scratch.
Half-Written Drafts Disappear Forever
You started a workspace message yesterday, got pulled into a call, and forgot it. Today the thread moved on without you. Drafts exist — the platform autosaved them — but there's no single "show me everything I haven't finished" view.
"My Tasks" Means Tasks From Five Different Apps
A task from a workspace, a task from onboarding, a task from a service-desk ticket, a task from a workflow — they all land in different inboxes. "What's overdue?" is a five-page click tour.
The Notification Inbox Becomes Wallpaper
230 unread. Most don't matter. Three of them are the @-mentions you actually needed to see before 9am. The inbox is so noisy that triaging it manually is its own job.
"What Was I Working On?" After A Two-Week Vacation Is A Half-Day Of Spelunking
Back from leave, you open the laptop and have no idea where you left off. The last doc you edited, the workspace you were active in, the threads waiting on your reply — they're all there, scattered across six apps. A "what's mine and recent?" rollup would save the morning; instead you reconstruct the picture tab by tab.
Your Own Profile Data Is Hard To Find In Your Own Tool
"What's my employee ID?" "Where's my offer letter filed?" "Who's my listed emergency contact?" Each lives in a different app's profile surface, none of them indexed together. A scoped chat answer would take three seconds; the actual lookup takes three minutes of clicking through menu items you only use once a year.
Personal Agent At A Glance
Personal AI
Searches your own bookmarks, drafts, tasks, and inbox. Hard-scoped to your account.
Inside Personal Agent — The Actual Capabilities
Every block below maps to a real tool the agent uses against your own data. Reads run against your account only; writes confirm before they change anything; the writes_enabled toggle gates the entire write set per tenant.
Find Anything You've Bookmarked, Across Every App
Your bookmarks span ten different record types — workspace messages, comments, tasks, wikis, HR policies, SOPs, library items, site pages, recognition posts, recruiting jobs. The agent searches all of them by title and by note text, so you can find the thing you saved even when you've forgotten what app it lived in.
- Search across every bookmarkable type — search_my_bookmarks covers WorkspaceMessage, WorkspaceMessageComment, Task, Wiki, HrPolicy, Sop, LibraryItem, SitePage, RecognitionPost, RecruitingJob.
- Substring match against title AND note — find a bookmark by the reason you saved it, not just the title of the record.
- Filter by type — "show me my bookmarked wikis" / "my bookmarked SOPs" without scrolling through everything.
- Limit defaults to 25 — the agent returns a tight ranked list, not a wall of every bookmark you've ever made.
Pick Up The Drafts You Left Half-Written
Every workspace message and comment you started but didn't post is autosaved as a draft. The agent surfaces them in one list — your unfinished workspace messages and comments — so the half-written reply from yesterday doesn't get buried.
- List every unfinished draft — list_my_drafts covers workspace messages and message comments saved across the platform.
- Filter by kind — workspace_message vs workspace_message_comment when you only care about one.
- Last-edited timestamp on every row — easy to tell the draft from this morning apart from the one from three weeks ago.
- Personal-only by construction — you only ever see your own drafts; never another user's.
Triage Your Tasks Without Touching Five Apps
Tasks land from a dozen sources — workspace assignments, onboarding flows, service desk tickets, performance reviews, surveys. The agent filters them down to open, overdue, or "due in the next N days" so you can plan the day from one prompt.
- List tasks assigned to you — list_my_tasks filterable by status (open / completed / all / overdue).
- {"Due window filter — due_within_days" => "7 for \"what's on my plate this week\"."}
- Overdue surfaced explicitly — "show me what's overdue" returns a ranked list, not a search you have to interpret.
- Scoped to your account — never returns tasks assigned to anyone else, even if you'd nominally have access to view them.
Summarize Your Inbox Without Reading 200 Notifications
The notification inbox builds up fast — @-mentions, task assignments, ack reminders, workspace updates. The agent summarizes the unread set with counts plus the most recent handful, so you can see what matters without scrolling.
- Summarize your inbox — summarize_my_inbox returns unread counts plus the most recent N items (default 10).
- Unread-only by default — the noise from already-read items is filtered before the summary runs.
- Counts surface @-mentions and assignments — the items most likely to need your attention bubble to the top of the summary.
- Personal scope — the agent never reads anyone else's notification inbox.
Write Actions, Every One Confirmation-Gated
The agent can save a bookmark, remove one, update a bookmark's personal note, or mark notifications read — but every one of those is in RISKY_TOOLS and requires explicit confirmation. The tenant-level writes_enabled toggle gates the entire write set, so a read-only deployment simply doesn't expose them.
- 4 risky writes — bookmark_record, remove_bookmark, update_bookmark_note, mark_inbox_read — every one requires explicit confirmation.
- Bookmark any of 10 record types with an optional 500-char personal note.
- {"Mark inbox read selectively or in bulk — pass notification_ids for surgical clears or all" => "true for a full sweep, both confirmation-gated."}
- writes_enabled tenant toggle — when off, the agent ships read-only and the write tools are not exposed to the model at all.
Outcomes Teams Can Measure
Personal Agent isn't a customer-facing metric mover — it's a productivity backstop for every user. The right measurements are about adoption and the day-to-day fragmentation it absorbs, not about deflection or cycle time.
- Daily active users hitting Personal Agent at least once for bookmarks / tasks / drafts / inbox.
- Time-to-first-action on overdue tasks — median minutes from "what's overdue?" to a status change.
- Inbox triage rate — share of unread notifications cleared via the agent vs the standalone inbox UI.
- Bookmark recall — share of bookmarks retrieved via search vs the standalone bookmarks page (signals whether users can actually find the things they saved).
- Write-toggle adoption — share of tenants that turn writes_enabled on after starting in read-only mode.
Hard-Scoped To The Asking User · No Cross-Account Reads, Ever
Personal Agent is the only agent in the platform whose authorization rule is "user_id = current_user.id" on every query. It cannot search another user's bookmarks, drafts, tasks, or inbox — not even with admin elevation. The four writes are RISKY_TOOLS and require confirmation; the whole write set is gated by a tenant-level writes_enabled toggle.
- Every query carries user_id = current_user.id — there is no parameter to look up someone else's bookmarks, drafts, tasks, or inbox.
- 4 risky writes, all confirmation-gated — bookmark_record, remove_bookmark, update_bookmark_note, mark_inbox_read.
- writes_enabled tenant toggle — controls whether the write tools are even exposed to the model; deploy read-only by default if preferred.
- Audit trail on every action — read or write, the agent logs requesting user, tool called, and parameters; useful for SOC2 and tenant-specific compliance asks.
WHAT TEAMS TRY INSTEAD
The four alternatives — and why none of them can see your bookmarks, drafts, tasks, or inbox at the same time
Most employees default to one of these before they discover Personal Agent. None of them combine cross-app reach with a per-user identity scope that the platform enforces.
Pasting links into ChatGPT, Claude, or Copilot
General-purpose AI doing one-shot tasks on copied text
- Personal Agent already knows your bookmarks, drafts, tasks, and inbox — nothing to paste
- Acts on records (mark inbox read, edit a bookmark note) instead of producing prose about them
- Stays inside the platform's permission model so the agent literally cannot list another user's data
Microsoft 365 Copilot / Google Workspace Duet AI
Vendor-trapped personal AI that ends at the suite boundary
- Reaches across MangoApps apps — schedule, recognition, training, service desk — not just mail and docs
- Works for the deskless and frontline users who never had M365 or Workspace seats in the first place
- <code>user_id = current_user.id</code> is hard-scoped at the tool layer, not an opt-in security mode
Custom personal assistant build on the intranet
An engineering team's roadmap item that never quite ships
- Shipped already with bookmarks, drafts, tasks, and inbox reads on day one — no integration sprint
- 4 confirmation-gated writes covered (<code>bookmark_record</code>, <code>remove_bookmark</code>, <code>update_bookmark_note</code>, <code>mark_inbox_read</code>) with audit logging
- Picks up new platform capabilities automatically as new agents ship — no rebuild per source system
The manual fallback — find it yourself later
Browser tabs, bookmark folders, and a personal triage routine that loses to the inbox
- Where is that bookmark I saved last week — answered in one prompt instead of scrolling
- Drafts you forgot you started come back into view before they expire
- Inbox triage moves from scroll-and-pray to show-me-what-is-actionable
PLATFORM LEVERAGE
Personal Agent inherits everything the platform already enforces
A standalone personal assistant has to plumb identity, permissions, audit, and mobile delivery itself. Personal Agent gets all of it for free.
Hard-scoped identity
Every tool call substitutes user_id = current_user.id at the framework level. There is no parameter to look up someone else's data — by design.
Cross-app data plane
Reads bookmarks, drafts, tasks, and notifications across every app in one prompt — Schedule, Recognition, Workspaces, Wiki, Files, all of it.
Confirmation-gated writes
4 risky writes (bookmark, unbookmark, edit note, mark read) each pause for explicit confirmation before commit — the same pattern every other write-capable agent uses.
writes_enabled tenant toggle
Admins can deploy the agent read-only by default. Write tools aren't even exposed to the model until the tenant opts in.
Audit trail on every action
AiApiLog captures requesting user, tool called, and parameters for every read or write. Same retention and eDiscovery as the rest of the platform.
Mobile-first delivery
Lives inside Ask AI in the same mobile app frontline employees already opened for shifts and pay — no separate sign-in, no separate app to install.
INDUSTRY FIT
Where a per-user agent moves the needle
Personal Agent helps everywhere, but the lift is biggest in industries where employees touch many apps a day and have no desk to organize them from.
Retail
Store associates triage shift, training, and recognition notifications between transactions instead of after-shift on a personal device.
Healthcare
Clinicians find the policy bookmark from last month's safety in-service in one prompt instead of scrolling through a charge nurse's folder.
Manufacturing
Plant-floor crews on shared kiosks see only their own tasks, drafts, and inbox — never the previous user's — because identity is hard-scoped at the tool layer.
Hospitality
Property staff pick up unfinished maintenance drafts and overdue tasks at the start of every shift without bouncing across four apps.
Financial Services
Bankers and advisors mark compliance notifications read with a confirmation step and a full audit row — useful evidence when supervision asks.
Public Sector
Personal data stays inside the tenant boundary with FedRAMP-eligible deployment options — no AI traffic leaving to a third-party assistant.
WHY MANGOAPPS WINS
An embedded personal agent beats a horizontal AI, a suite-trapped Copilot, or a custom build on every axis
The argument employees, IT, security, and finance all share — and the one ChatGPT or Microsoft Copilot structurally cannot answer.
Cheaper than the alternatives
No per-seat ChatGPT Plus license, no Microsoft 365 Copilot add-on at $30/user/month, no engineering team building yet another internal assistant.
More secure
user_id = current_user.id is enforced at the tool layer, every action logs to AiApiLog, and writes are confirmation-gated. Nothing leaves the tenant boundary.
Easier to deploy
Already deployed if Ask AI is on. Toggle writes_enabled when you want write tools live. No identity provider rewire, no separate vendor onboarding.
Easier to use
Lives inside the Ask AI sidebar across every page in the platform. Frontline employees use it on the same mobile app they already opened for the day.
Easier to manage
One toggle to enable writes, one configuration screen, one audit log. Per-business preferences sit beside every other app's settings.
Easier to extend
Shares the agentic-tool framework with every other MangoApps agent. New personal capabilities ship as tools, not as a rebuild.
AI is actually better
Copilot can summarize your inbox. Only Personal Agent can also list your unfinished workspace drafts, edit a bookmark note from last quarter, and surface your overdue tasks across every app — all from one prompt, all hard-scoped to you.
At our head office within HR, marketing, and finance, we use ChatGPT quite a bit, and MangoApps AI Helper is a useful tool for us. As I go around to the stores, I’ve been showing them how the AI Intranet Helper can find things and answer plain language questions about our resources, and they’re quite excited about that.
Alison van Zijl
Head of Human Resources
Full House
Customer Success
Related Customer Stories
Customer Case Studies
Customer Case Studies
Customer Case Studies
Customer Case Studies
Customer Case Studies
Customer Case Studies
Frequently Asked Questions About Personal Agent
8 tools — 4 read and 4 write. Reads (search_my_bookmarks, list_my_drafts, list_my_tasks, summarize_my_inbox) surface your saved items, half-written drafts, open/overdue tasks, and unread notifications. Writes (bookmark_record, remove_bookmark, update_bookmark_note, mark_inbox_read) require explicit confirmation and are gated by a tenant-level writes_enabled toggle.
No. The agent is the only one in the platform whose tool parameters do not accept another user's id — every query implicitly scopes to current_user.id. Even with admin elevation, Personal Agent will never return another user's data. For cross-user lookups, Platform Admin Agent is the right entry point.
Ten — WorkspaceMessage, WorkspaceMessageComment, Task, Wiki, HrPolicy, Sop, LibraryItem, SitePage, RecognitionPost, RecruitingJob. Each bookmark can carry an optional 500-character personal note that the agent can search and edit.
Each write tool is in RISKY_TOOLS, which triggers the platform's standard "agent is about to do X — confirm?" gate before the tool runs. The agent surfaces the target record and the action it's about to take; nothing changes until the user explicitly confirms. The tenant writes_enabled toggle is the kill switch — when off, these tools are not exposed to the model at all.
Daily active users hitting Personal Agent, time-to-first-action on overdue tasks, inbox triage rate via the agent vs the inbox UI, bookmark recall (search vs standalone page), and the share of tenants that flip writes_enabled on after starting in read-only mode.
Let's Talk
Since 2008, we've been building the workforce platform — earning the trust of 2 million+ users and an NPS of 78.
Why Choose Us?
- AI-Powered Platform: The most unified workforce experience on the planet.
- Top Security: HITRUST, ISO & SOC 2 certified.
- Exceptional UX: Delightful on mobile and desktop.
- Proven Results: 98% customer retention rate.
Trusted by Legendary Companies:
