Agents improvise. Your rules don't.
Policies live on every action, not in a prompt. Anything that breaks one is denied before it runs, and every decision is signed and kept.
- Allowread ledger.q3
- Denywire USD 48,000
- Holdemail 14 vendors
- Allowquery contracts
- Denydrop table vendors
- Allowcommit run 8821
Every action meets the gate.
- 01Scoped permissionsEach agent touches only the tables, tools and inboxes its brief names. Everything else does not exist to it.
- 02Spend ceilingsLimits live on the action itself, not in a prompt someone can talk around. A run stops at the line you set.
- 03Human sign-offAnything outbound waits in a queue with its full trace attached. Approve it, edit it, or send it back.
- 04All-or-nothing runsA job settles in full or rolls back. No half-paid batches, no emails sent for a reconciliation that failed.
- 05A full audit trailEvery token, tool call and decision is signed and kept, ready for the auditor who asks a year from now.
- Allowed
- 00
- Denied
- 00
- Held
- 00
Every run, on the record.
Sort, filter and open any run to see exactly which steps went through and which were stopped.
Ready for your auditor.
The certifications, agreements and controls security teams ask for, in place before your first run.
- 01
SOC 2 Type II
Audited every year by an independent firm. Reports available under NDA.
- 02
ISO 27001
An information security programme certified end to end.
- 03
GDPR and DPA
A standard data processing agreement and EU representative included.
- 04
Data residency
Run in the EU, the US or a private VPC. Your data never leaves the region.
- 05
No training on your data
Inputs and outputs are never used to train any model, ours or a provider's.
- 06
SSO and SCIM
SAML single sign-on and automatic provisioning on every paid plan.
Policies as code.
Write your rules in one file, review them like any other change, and ship them with every deploy.
- Versioned with your repo
- Reviewed in pull requests
- Tested before they ship
# ordin.policy.yamlpolicies: spend-ceiling: max_usd_per_run: 0.05 on_breach: deny sign-off: actions: ["email.send", "payment.create"] approvers: ["finance-leads"] timeout: 4h scope: tables: ["ledger_q3", "vendors"] write: falseHand it the job. Keep the rules.
Free for the first 10,000 runs. Bring your own model, keep your own data, ship your first agent this afternoon.