Capabilities
We label every capability honestly. Preview means built to standard but not yet proven against customers’ live systems.
Designed top-down from a requirements library, down to step-level controls inside procedures.
Controls, a risk register, findings and remediation, an exceptions workflow, and monitoring views.
A published policy version cannot change silently; its hash proves what was in effect.
Suggested controls and risks to speed up setup, reviewed by a person before use.
A signed statement of what the platform records about a control at a point in time.
Answers drawn from approved policies and procedures, scoped to the asker’s department and role.
Run the knowledge assistant on a private local model inside your own environment.
One library of controlled, team and private documents that know which controls they satisfy and who has read them.
Connector framework for cloud, code and HR systems (for example AWS, Azure, GitHub, GitLab, BambooHR). Each connector is in preview until proven against a customer’s live system.
Reviewers certify access and the result is sealed and exportable for an auditor.
Built to standard, not yet run against a live Okta, Entra or Google tenant. We do not claim “tested with” any vendor.
Passkeys and authenticator codes, plus a fresh check before irreversible actions.
Access that expires on its own, or is requested and approved by a named person.
IP allowlists, session and device limits, and new-device emails.
Need-to-know access on policies, risks and findings, enforced in the database.
A link your IT team uses to configure sign-in without involving us.
Each entry is chained to the one before it, so edits become visible. Try it on the home page.
Pull API and signed webhooks to send audit events to your security tooling.
If we need to look at your data to help you, you approve it, it is read-only, and it is on the record.
An agent gets only the access a person delegates, expires on time, and can be revoked at once.
Standard connection for the agents your teams already use.
One place to see, approve and review what agents did.
Today the platform runs in the cloud. Private or on-premises deployment, including a local model for knowledge answers, is coming soon. What stays inside your environment will be spelled out here before we offer it. Coming soon
Policy library categories. The domain list on the home page (for example network security, cryptography, asset management, model risk and third-party risk) describes policy library categories, not separate working modules.
Take the tour, or book a walkthrough with fictional demo data.
