Real-time policy
Governance.
Continuous, not quarterly.
Every transaction is screened — segregation of duties, PII exposure, retention, access, PO compliance — and every decision the platform makes lands in a hash-chained audit ledger you can export to your SIEM or GRC.
What ships in Governance
Built like an audit team would build it.
Access review
Periodic certifications across systems. Dormant accounts flagged. Privileged role drift detected.
PII exposure scan
Find and redact PII before it reaches a model, a reply, or a downstream system.
Data retention audit
Surface records past their retention window across warehouses, ERPs, and SaaS apps.
Failed login audit
Anomaly detection on auth events; correlate to SoD / privileged actions.
PO compliance audit
Frame contracts, three-way match, vendor risk screens — at every PO, not in samples.
SoD enforcement
Blocks conflicting actions in real time. Overrides require dual approval, captured to ledger.
Editable policies + history
Tune severity, description, and rule JSON inline — every change writes a before→after audit diff.
Risk scoring
Every Reaction gets a composite 0–100 score; high-risk runs auto-route to human approval.
Hash-chained audit
Tamper-evident ledger. Each event signed. Export to SIEM or GRC stack.
Out of the box
Policies you don't have to write.
Part of the control plane
Governance is one of four control surfaces.
Policy enforcement sits alongside the in-line Trust Layer, per-run Risk scoring, and the Records provenance trail.