Use case · By risk
Find the AI nobody approved.
Find them read-only, then move the work to a governed route.
“Unapproved AI tools are already handling company data.”
Control in three steps
Find them read-only, then move the work to a governed route.
Check who is asking
Every person and agent is named, with a role from your directory.
Allow, ask or decline
Inside the role it runs. Changes wait. Outside the role, declined.
Record it
Every step lands in the audit trail.
See it work
Watch it happen.
Step 1 of 4: Request
“Summarise these three loan files.”
Every request starts with a named person and a named agent.
Simplified example. Names and records are invented.
Text version
Credit team (Department) asks Unapproved chat tool: "Summarise these three loan files." The security check returns: Routed. Every step is written to the audit log.
01 Request
Credit team · Department · Unapproved chat tool
Summarise these three loan files.
02 Security check
Routed
- Check
- Discovery finding
- Found
- Unapproved chat tool, Credit team
- Action
- Approved assistant offered
The finding becomes a governed route, not a ban.
03 Human approval
Not needed
The request was handled at the check. Nothing waited for a person.
04 Audit log
- 09:14:02 · request · credit-dept · chat-tool-personal · chat_upload
- 09:14:02 · check · unapproved AI tool · credit
- 09:14:02 · routed · to approved assistant
- 09:14:02 · logged · event 7f3a…e21 · on the record
Questions
Short answers. Ask us anything else on the call.
See this in your own organisation.
Start with a free assessment. Two weeks. Read-only.
A one-page answer for your CEO and CISO. Assessments are offered at our discretion.