John AI, the Replacement Agent
Finds replacements for uncovered shifts and contacts security officers in stages. Completely disabled by default.
Requirements
- Activation by us as the operator, after a Betriebsvereinbarung, meaning a works agreement, and an Auftragsverarbeitungsvertrag, meaning a data processing agreement
- Consent from each security officer for each channel
Activate first, then expect results
This is the point that causes most questions: the button is there, but nothing happens without activation. The agent is fully built but locked at several levels.
- We set the tenant approval as the operator. It is not a self-service setting. A Betriebsvereinbarung, meaning a works agreement, and an Auftragsverarbeitungsvertrag, meaning a data processing agreement, are required.
- WhatsApp and push each require a configured delivery channel.
As long as any of these are missing, the section is visible but has no effect. Contact us if you want to use it.
Cases
A case is an absence that requires a replacement. It is created after a sickness report or created manually. The overview shows open absences, active searches, escalated cases and cases filled today. Each row includes the site, shift start, countdown, reason, status and number of candidates.

How the search works
A search contacts several suitable security officers at the same time and expands the group step by step until someone accepts or the group is exhausted.
Security officers who have already been contacted are never contacted again. If there are no candidates from the start, the case is escalated immediately instead of running without effect.
If the search finds no one, a notification asks the planners to take over. The case remains open until a person decides.
We configure the scope and cadence of the search with you during activation.

Contact window
Contacts are made only within a defined time window each day. The window is binding. Anything due outside the window is moved to the start of the window, not skipped. No one is called at night because a search happens to be due then.
The only way around this is your own "Continue searching, now" action. The automated process never overrides the window. We define the window with you during activation.
Channels and consent
Security officers are contacted through the channels to which they have consented, in stages from the least intrusive to the most direct contact.
Each security officer decides for each channel whether they may be contacted in this way. No one can give this consent on their behalf. There is deliberately no setting for it in the Cockpit. If consent is missing, the agent skips the channel and records this as a separate entry in the timeline. Anyone wondering why certain people are never called can find the answer there.
What the call assistant says and does not say
At the start, it explicitly identifies itself as a virtual assistant. This is a requirement of the KI-Verordnung, meaning AI regulation, and cannot be disabled.
It offers exactly one shift and can do four things: accept, decline, escalate to the scheduling team and look up an answer to a factual question. It makes no commitments about pay, swaps or other shifts. There are fixed responses and an escalation for those topics.
An acceptance is also checked again on the server before it is booked. If the last statement is not an unambiguous acceptance, the assistant asks for clarification instead of booking.
There is no audio recording. The system stores the time, result, a truncated response text and the call duration.
Approval levels
There are four configurable levels: analyze only, provide recommendations, prepare actions and have a person confirm them, or act independently. At every level, the strict server rules for contact times, consent and suitability remain unchanged.

Credits
The agent has a built-in spending block. A push notification costs nothing, a WhatsApp message costs one credit, a call costs ten and an analysis run costs one. 200 credits are included per month, and additional credits can be purchased in packages.
If the allowance is empty, the call fails with a notice instead of silently not taking place. A warning appears in the bell when 20 percent remains.
Related
- Absence and ReplacementA sickness report starts a process, not automatic replanning. The scheduling team retains the decision.
- NotificationsEleven triggers, each in 15 languages, plus a feed in the Cockpit.
- Security and Data ProtectionWhat is enforced technically, where data is generated, and how long it is retained.
Updated on: 03.09.2026