Platform Platform
System
ConceptsEnginePolicy as codeDeclarationsSafe changeGatewaysIntegrationsObservabilityAdministrationSecurityHuman reviewAudit and evidenceData retentionSecrets and data classification
Controls
Registries and documentationAuthentication and authorizationInjection detectionData redactionCode fingerprintingRole and judge checksContent classificationSpend and loop limitsBusiness rules
Solutions Solutions
By what you do
Sell into the enterpriseControl the AI you run
By industry
Financial servicesDigital assetsInsuranceHealthcareLegalUser-generated content
By discipline
AI governanceTrust and safetyRisk and compliance
Cases Cases Embedded control planeSource-code leakTrading agents over MCPLive firehoseRefund assistant
Compare Compare LiteLLMNVIDIA NeMo GuardrailsOPAROOSTAgent Governance Toolkit
Resources Resources
Guides
Enterprise review questionsPrompt injectionAgent and control layerAgent architecturesDecision system mapAI control maturity model
Standards
Standards OWASP Agent Control StandardEU AI ActPMI AI standardNIST AI RMFERC-8004
Book a demo
Platform · System

It reports into the tools you already run.

A control layer that only reports into its own dashboard is a second system for your team to watch, and it will be the one they forget.

A service you deploy.

Two streams, two destinations

WhatHowWhere
Metrics and logsOpenTelemetry: metrics over OTLP gRPC or HTTP, logs over OTLP HTTP; a Prometheus exporter for teams that scrapeyour collector
A decision a rule sendssyslog, or webhooks for anything elseyour SIEM

Application logs go through the OpenTelemetry log bridge, so a decision, the rule version behind it and the request that carried it correlate in your own tooling rather than in ours.

Nothing leaves your network to get there

These are pushes into systems you own. No endpoint of ours collects anything about your traffic.

Related: what a decision record holds · the rest of your stack
Book a demo