Seller Pao Trust Center
Seller Pao is the agentic ERP for online-selling SMEs in Thailand: a back office you can ask Nong Pao anything, where AI prepares accounting and tax work in full and you confirm. Free to start. This page collects the trust questions IT teams, accountants, and auditors ask: where data lives, how Nong Pao is controlled, and what we never let AI do.
Where is your data, and who can see it
Shop and customer data stays inside your account under assigned permissions: order staff, accountants, and admins see different things based on role and enabled modules. System architecture, backups, and service terms are at /security and /sla; this page summarizes only what you need to decide.
How humans control Nong Pao
Nong Pao is the in-app AI assistant. There are six control layers, all live today.
- 1
Closed navigation list
Nong Pao can take you only to destinations the system defines, never external URLs, and never grants extra permissions.
- 2
Answers only from confirmed sources
Answers come from your own account data and system-confirmed topics; when context is unclear, Nong Pao says it does not know instead of guessing.
- 3
Preview before confirming every draft
Every document Nong Pao prepares shows full details for review first; nothing is saved without a human click.
- 4
Balance and readiness checks before offering
Journal entries must balance before being offered; PP30 drafts pass a period readiness check first.
- 5
Multi-stage document statuses
Documents move through Draft, AwaitApproval, Approved, or Voided; you can look back at the status of every document.
- 6
Role-based access
Nong Pao reads data only inside the asking user's account and role; beyond that boundary, it cannot see.
Additionally, if semantic search is unavailable the system states the limitation and offers totals instead of inventing an answer; every number is computed server side from data already effective in the books.
What we never let AI do
- File taxes with the Revenue Department by itself: PP30 drafts are prepared for review; filing is always human.
- Save entries by itself: every draft needs human confirmation before becoming a real document.
- Receive money or issue receipts by itself: income drafts via LINE never take payments, issue receipts, or auto-post.
- Guess when data is missing: it says it does not know and points to the right path.
AI prepares the work; humans review and decide. Tax work is locked at the level where a person confirms every time, no exceptions.
PDPA and the standards we follow
Shop and end-customer personal data is handled under Thailand's PDPA: collect only what operations need, export and delete anytime, never sold. Our AI design follows the trustworthy-AI principles of the NIST AI Risk Management Framework and the human-oversight principle of EU AI Act Article 14, which matches our rule that every level has a human in charge.
AI provider data policies
The system calls AI models from external providers; read each provider's data policy at
How available is the system
Uptime targets, downtime windows, and remedies when targets are missed are specified in /sla. For a deeper architecture review, contact the team through the website's contact channels before deciding.