← Back to articles
Goldmund's AI Agent Framework

Goldmund's AI Agent Framework

Scott Jones - Front-end Developer & Designer

13 June 2025

At Goldmund, we're developing an internal framework that enables us to deploy AI agents for various tasks and workflows across our customer projects. We've chosen to build this framework internally to maintain maximum control over the information, services, and LLMs that power our agents. This approach also allows us to deploy our solution across various hosting services and infrastructure, tailored to meet our customers' specific needs and requirements.

In this article, we'll explore our decision-making process, explain what AI agents are, and share our current progress in this field.

Disclaimer

This article discusses our internal development of AI agents and frameworks. While we share our approach and considerations, we recommend reviewing any AI implementation with your technical and legal teams to ensure it aligns with your organization's needs and compliance requirements.

Development Status

This framework is currently under active development. The approaches and implementations discussed may evolve as we continue to refine our solution.

Security & Privacy

All implementations of AI agents should be carefully considered in terms of data privacy and security. We strongly recommend reviewing any AI implementation with your security and compliance teams.

What are AI Agents to us

We view AI Agents as temporary, 'on-demand' team members that assist in performing automated reasoning tasks with limited scope and knowledge. While we maintain traditional validation approaches for ensuring data meets specific requirements and thresholds, we employ AI agents to analyze perform tasks on the content itself.

These tasks are carefully scoped and monitored to prevent sensitive information leakage and to manage the hallucinations and overreach that AI systems typically exhibit.

Not every task requires an AI agent, so when creating workflows, we maintain control over when and how AI should be used to improve organizational processes.

Sensitive Information Workflows

Sensitive Information Workflows

AI models still train on and retain information from prompts, meaning they can and do learn from the data you send them. What you send to AI models is crucial and must align with privacy laws and obligations.

Let's explore an example workflow we've created at Goldmund, simulating a health insurance company's claim processing system.

Traditional Workflow:

  1. User submits a request with manual information
  2. User uploads photos of receipts
  3. Insurance worker reviews the manual information
  4. Worker enters information from the receipts
  5. Internal system and guidelines validate the claim
  6. Decision is made and communicated to the user

Enhanced AI-Assisted Workflow:

  1. User submits request with manual information
  2. User uploads photos of receipts
  3. System (non-AI) anonymizes the claim information
  4. AI analyzes claim content against user coverage for initial assessment
  5. System (non-AI) anonymizes receipt data, extracting only billing information
  6. AI processes the sanitized receipt data and compares it with coverage
  7. AI populates the system with extracted information
  8. Insurance worker reviews AI summary and receipts for final assessment
  9. Decision is made and communicated to the user

While this workflow has more steps, much of it is automated both with and without AI. The insurance worker can focus more on claim substance rather than administration. We carefully control what information reaches the AI, keeping it limited and scoped to ensure no personal details are exposed. The worker maintains final decision-making authority while AI assists with non-sensitive tasks and preliminary assessments.

Complex Iterative Workflows

Complex Iterative Workflows

Beyond linear workflows, we've developed more complex systems where AI can make suggestions, improvements, or iterate over workflow aspects.

TV & Network Broadcaster Workflow:

  1. User submits a TV proposal
  2. System (non-AI) validates information completeness
  3. AI 'Review' Agent analyzes the proposal:
    • Checks for existing similar shows
    • Identifies potential copyright issues
    • Compares with similar shows and their ratings
    • Validates categorization
    • Provides improvement suggestions
  4. If needed, 'Iteration Agent' refines the proposal:
    • Adjusts titles and character names
    • Updates categories
    • Addresses copyright concerns
    • Cycles through review process until criteria are met
  5. Original and revised proposals are presented to the user and broadcaster
  6. Broadcaster reviews with enhanced insights for faster, more confident decisions

This workflow employs multiple AI agents that review each other's work, providing broadcasters with comprehensive insights from the start.

A Tool, Not a Replacement

At this stage, AI Agents can only reliably function as tools to enhance existing workflows. They're not yet capable of fully replacing human oversight. While we've experimented with full automation, concerns about data security, information handling, and AI's tendency to hallucinate make complex workflows unreliable without human supervision.

Our framework integrates with third-party APIs, supports multiple LLMs and models, enables collaborative iterative workflows, and prioritizes user information security. But these agents only still help to improvem the workflow, they don't replace the need for human oversight and validation.

Security Concerns

Security Concerns

AI agents are vulnerable to exploits from user-submitted data or exposed instructions. We've implemented several safeguards:

  • AI agents operate in the background behind protected APIs
  • Agents are instructed to never execute input data directly
  • Each agent is limited to specific tasks and tools
  • Agents are isolated to prevent cross-contamination
  • Access to information is strictly controlled

This compartmentalization prevents agents from accessing or influencing other agents in the workflow, maintaining strict control over their capabilities and scope.

Conclusion

Looking Forward

We continue to develop and refine our framework, expanding integrations and improving our tooling. As we progress, we'll share more insights and updates on our approach to AI agents.

If you're interested in learning more about Goldmund's work with AI agents or exploring potential collaborations, we'd love to hear from you.

Want to reach out?

Did you find the article interesting, want to discuss it or ways that Goldmund might be able to help you? Please feel free to reach out using one of the methods below.

Other Articles

Visit us

Headquarters Groningen

Winschoterdiep 50, 9723 AB Groningen