Use case · By business need
Say yes to AI at work.
Give an approved assistant that only reaches what each role allows.
“Staff use AI anyway, often with no safe option.”
Control in three steps
Give an approved assistant that only reaches what each role allows.
Check who is asking
Every person and agent is named, with a role from your directory.
Allow, ask or decline
Inside the role it runs. Changes wait. Outside the role, declined.
Record it
Every step lands in the audit trail.
See it work
Watch it happen.
Step 1 of 4: Request
“Show me salary data for the whole finance team.”
Every request starts with a named person and a named agent.
Simplified example. Names and records are invented.
Text version
Grace W. (HR Officer) asks Staff assistant: "Show me salary data for the whole finance team." The role check returns: Declined. Every step is written to the audit log.
01 Request
Grace W. · HR Officer · Staff assistant
Show me salary data for the whole finance team.
02 Role check
Declined
- Role
- HR staff (from your directory)
- Read
- Allowed
- Change
- Not allowed for this role
Salary data is outside this role. Declined and recorded.
03 Human approval
Not needed
Declined at the role check. It never reached an approver.
04 Audit log
- 09:14:02 · request · grace.w · staff-assistant · read_payroll
- 09:14:02 · policy · role=hr-staff · read=allow · change=deny
- 09:14:02 · declined · payroll read outside role
- 09:14:02 · logged · event 7f3a…e21 · on the record
Questions
Short answers. Ask us anything else on the call.
See this in your own organisation.
Start with a free assessment. Two weeks. Read-only.
A one-page answer for your CEO and CISO. Assessments are offered at our discretion.