mshartıBook an assessment

Platform · AI Access Layer

Decide what AI can reach.

One governed doorway between your AI and your business. Actions wait for a person. Every step is recorded.

People and agentsassistants, agents, apps
AI Access Layeridentity · policy · checks
ApprovalAudit log
Your systemsread first, more by policy

See it work

Watch one request, end to end.

Pick a scenario, then step through it.

Step 1 of 4: Request

Amina K. · Relationship OfficerStaff assistant

“Update the phone number on customer record C-10428.”

Every request starts with a named person and a named agent.

audit_log
09:14:02requestamina.k · staff-assistant · update_contact C-10428
09:14:02policy· · ·
09:14:03approval· · ·
09:21:47approval· · ·
09:21:47executed· · ·
09:21:47logged· · ·

Simplified example. Names and records are invented.

Text version

Amina K. (Relationship Officer) asks Staff assistant: "Update the phone number on customer record C-10428." The role check returns: Approval required. Human approval: Approved. Every step is written to the audit log.

  1. 01 Request

    Amina K. · Relationship Officer · Staff assistant

    Update the phone number on customer record C-10428.

  2. 02 Role check

    Approval required

    Role
    Branch staff (from your directory)
    Read
    Allowed
    Change
    Needs approval

    Read-only first. Changes wait for a person.

  3. 03 Human approval

    Approved

    Approver
    Branch operations supervisor
    Action
    Change phone number, 1 record
    Risk
    Medium
    Expires
    In 30 minutes

    The branch operations supervisor approves. Nobody approves their own request.

  4. 04 Audit log

    • 09:14:02 · request · amina.k · staff-assistant · update_contact C-10428
    • 09:14:02 · policy · role=branch-staff · read=allow · change=approval_required
    • 09:14:03 · approval · sent to branch-ops-supervisor
    • 09:21:47 · approval · approved by peter.o · maker-checker ok
    • 09:21:47 · executed · update_contact · result=success
    • 09:21:47 · logged · event 7f3a…e21 · on the record

How it works

Who. What. Who said yes.

STEP 01

Identity

Every person and agent is named, with a role from your directory.

STEP 02

Access

Read first. Anything more only by policy, per tool and per action.

STEP 03

Approval

Changes wait for a human. No answer means no.

Human approval

No AI action without a human yes.

Changes become requests. The right person approves, changes or rejects.

  • Read-only first.
  • Changes wait for a person.
  • No answer means no.
  • Nobody approves their own request.
Approval required · Medium risk

Update customer contact record

Requested by
Amina K., Relationship Officer
Agent
Staff assistant
Change
Phone ••• 4471 → ••• 9902
Approver
Branch operations supervisor
Expires
In 30 minutes, then denied
Rule
Maker-checker
Every action has a story04 / EVIDENCE
Policy checked · role=finance
Reconciliation · MPE-S06•••
AK

Post the unmatched M-Pesa receipt to SAP.

One posting. KES 15,250.
Finance supervisor approved.

Decision and result linkedrequest → policy → approval → action
  1. 09:14Request received
  2. 09:15Approval recorded
  3. 09:17Result logged
Who asked. Who approved. What changed.

Audit trail

Every step, on the record.

Who asked, which agent, what was allowed, who approved, what happened.

AI security checks

Checks on what goes in and out.

See AI Application Security →

Prompt-injection checks

Hidden instructions caught before the AI acts.

Status: In delivery

Secret stripping

Keys and tokens removed before a prompt leaves.

Status: In delivery

Sensitive-data masking

ID and account numbers masked in the path.

Status: In delivery
Works with the AI your people use. Copilot, ChatGPT, Claude and your own agents.How it connects and where it runs: we cover that on the assessment call.

Where it fits

AI AgentsAI AssistantsMCP and Agent AccessSafe Staff AI

Questions

Short answers. Ask us anything else on the call.

Within the AI Access Layer

Your own systems, under the same rules.

Explore how msharti builds custom connectors for your organisation.
Custom Connectors

See it on your own AI use.

Start with a free assessment. Two weeks. Read-only.

A one-page answer for your CEO and CISO. Assessments are offered at our discretion.