An agent with its own identity and filesystem, across text, desktop and voice
Vellum is an AI agent you reach on Telegram, Slack, Email, Voice and Web. To start, create an account. It messages you first rather than waiting to be asked.
A personal assistant you shape: you set the personality, supply the context, and it keeps a memory of people and preferences across years. Routines and heartbeats let it work while you are away and message you with what matters. It is reachable on the web, macOS, iOS, Slack and Telegram.
It names eight model providers, which is more than double the next longest list in this directory: Anthropic, OpenAI, Google, Fireworks AI, Baseten, Atlas Cloud, Together AI and ElevenLabs, each with a link to its own privacy notice. It also lets you bring your own key, and says plainly what that changes: your data goes straight to that provider under your relationship with them rather than under Vellum's.
The training answer is a no with a switch. Data is used to evaluate and improve the systems that power Vellum and not to train models, and the collection itself can be turned off during onboarding or in settings.
On 11 September 2026 it added payments, and its documentation says how, which is rarer than the feature. The assistant pays through Stripe's Link wallet: you name a ceiling, it drafts a spend request naming the merchant, the amount and what for, you approve in the Link app, Link issues a single-use virtual card for that amount, and the assistant completes the checkout without ever seeing your saved cards. The launch thread shows an office assistant ordering a $32.19 lunch and the approval card it produced. It is the third listing here to name Stripe Link, and the first whose docs describe the approval step to the field.
The operating company is Vocify, Inc., which appears nowhere on the product pages. Worth stating for anyone checking our record: an enterprise platform for building and evaluating LLM applications also trades as Vellum, and a search for the name mostly returns that company rather than this one. The two are different companies.
| Channels | TelegramSlackEmailVoiceWeb |
|---|---|
| How you start | Create an account |
| Who starts it | Messages you first |
| Is there an app | Optional app An app exists but is not how you start |
| Categories | Personal assistants,Work |
| Can do | Email,Calendar and scheduling,Phone calls,Writing code,Web research,Persistent memory,Task management,Payments |
| Connects to | Gmail, Google Calendar, Slack, Telegram, Stripe Link |
| Pricing | A free tier with a paid plan at $30 a month. |
| Number type | Not stated on its own pages |
| Contact number | None published |
| Documentation | vellum.ai/docs |
| First message, pre-written | None published |
| Runs on | Not disclosed |
| Browses with | Not disclosed |
| Number carrier | No number to look up |
| Status | Live |
| Trains on your conversations | States it does not“including evaluating and improving the systems that power Vellum, but do not use it to train AI models. You can opt in or out of this collection at any time during onboarding or in Settings > Permissions & Privacy.” |
|---|---|
| Data of people who never signed up | Not addressed |
| What it holds when you connect an account | Not stated in the policy |
| If you cancel | Not stated in the policy |
| Model providers named | Anthropic, OpenAI, Google, Fireworks AI, Baseten, Atlas Cloud, Together AI, ElevenLabs |
| Jurisdiction | United States. Vocify, Inc. is the operator, with US state privacy rights and an advertising disclosure. |
| Security document | Published. A trust and security section in its documentation: OS-level sandboxing that fails closed, a keychain-backed credential vault the model never reads, inbound messages scanned for secrets, and a permissions model enforced outside the AI, which it says leaves no way to prompt-inject past a permission boundary. |
| Asks before acting | Every tool carries a risk level, low, medium or high; a risk tolerance from Strict to Full access decides which prompt for approval, and high-risk actions always do unless set to Full. |
| Prompt injection | Named as a risk on its own pages |
| Bug bounty | None published |
| Who is on the line | The agent |
| Calls from its own number | Not stated on its pages |
| Says it is software on the call | Not stated on its pages |
| Records the call | Not stated on its pages |
| Availability | Not stated |
Vellum’s own pages answer 6 of the 9 questions this site asks of every listing. Not answered: says what happens if you cancel, names who carries the messages, says where to report a bug. About the middle of its kind: 37th of 56 personal assistants.
Quoted verbatim from the published policy on 2026-10-03, and what a document says is not the same as its legal effect.
| Company | Vocify, Inc. |
|---|---|
| Founders | Not published |
| Based in | Not published |
| Funding | Not published. Its own site names no company entity, no founders and no round, and an unrelated developer platform of the same name is easily mistaken for it. |
| Investors | Not published |
| Traction | Not published |
From Vellum’s own pages at vellum.ai, last read 2026-09-10.
What Vellum and its founders have posted: launches, features and claims, recorded as what the product says about itself.
vellum
@vellum_ai · 2026-09-11
Give your assistant a wallet you control with @link 💳 Link handles the credentials + approvals, and vellum gives you the control layer on top: 1/ see exactly what your assistant is doing 2/ capture every edge case so it gets better over time Works best with Quality mode.
Vellum