Compliance teams get real answers, not screenshots.
Every agent decision logged immutably. Every human action attributable. Every policy versioned. Every report exportable. Built for security + compliance teams who need to answer auditors with real data.
"Show me every action your AI took on Acme's account last quarter, with the policy that allowed each one, and who approved any high-risk action." — One query. One export. One PDF for the auditor.
- 01Audit Log
- 02RBAC
- 03Per-team Rules
- 04Compliance Reporting
- 05Data Residency
Audit Log · Immutable, queryable
Every agent action, every human action, every policy decision, every system event — written to an append-only log. Cryptographically hashed. Exportable to your SIEM. Queryable from the dashboard or via API.
- 1.1Append-only, cryptographically hashed log
- 1.2Per-row attribution (actor, action, inputs, result)
- 1.3Export to Splunk · Datadog · S3 · webhook
- 1.4Retention configurable (90d default, 7y enterprise)
RBAC · Role-based access
Out-of-the-box roles: Admin, RevOps, Manager, Rep, Compliance, Read-only. Custom roles supported. SSO + SCIM provisioning for enterprise. Every permission change logged.
- 2.16 built-in roles + custom roles
- 2.2SSO via SAML 2.0 + OIDC
- 2.3SCIM 2.0 for automated user provisioning
- 2.4MFA + step-up auth for high-risk actions
Per-team Rules · Scoped permissions
Different teams need different rules. Enterprise sales might require approval on all outbound; SMB sales on full auto. EMEA might exclude voice channel by region. Per-team configuration without forking the whole policy matrix.
- 3.1Team-scoped autonomy + policy overrides
- 3.2Inherited rules with explicit overrides
- 3.3Cross-team visibility controls
- 3.4Per-team activity dashboards
Compliance Reporting · Pre-built + custom
Pre-built reports: SOC 2 evidence packs, GDPR processing logs, TCPA consent reports, A2P 10DLC audit trails. Custom reports via the activity log + reporting API.
- 4.1SOC 2 evidence pack (auto-generated quarterly)
- 4.2GDPR Article 30 processing register
- 4.3TCPA consent + opt-out reports per region
- 4.4Custom DPA + sub-processor list on enterprise
Data Residency · US · EU · UK
Choose where your data lives. US (primary), EU (Frankfurt), UK (London). Data does not leave the region you select. Cross-region replication available on enterprise for high-availability requirements.
- 5.1US / EU / UK regions (more on roadmap)
- 5.2Data + backups stay in selected region
- 5.3Sub-processors per-region disclosed
- 5.4Region migration available with downtime window
Frequently asked
Audits stop being a fire drill.
Immutable log. Role-based access. Pre-built reports. Real answers, not screenshots.