11 docs tagged with "Compliance"

Manage your OpenBox organization: Configure teams, assign roles, set governance policies, and control access across all AI agents.

Prove what your AI agents did: Generate cryptographic attestations for every decision with tamper-proof, auditor-ready evidence.

Track every change in your organization: Complete audit trail of policy updates, user actions, and permission changes with export.

Map governance activity to EU AI Act, ISO/IEC 42001, and NIST AI RMF compliance postures, backed by cryptographic proof and an immutable audit trail.

Send trust incidents to your identity provider as CAEP signals over the Shared Signals Framework (off by default, opt-in per organization, new connections start in Monitor Mode).

Dual-record execution evidence: the governance decision and the Executor's signed attestation of a call it ran itself, linked via a reference embedded into the session record before the session is Merkle-sealed.

Record which provider served each prompt, in which region, at what cost — sealed with the session and re-checkable at the gateway.

See which provider served every model call, whether the allowlist held, where the data was processed, and what the broken promises cost.

Write policies that constrain which providers may serve a prompt, approve data regions, and halt a session when the gateway routes outside them.

Share one run's routing evidence as a page a customer can open — which provider served each prompt, in which region, and whether the routing held.

Verify AI agent identity with cryptographic proof: Authenticate every agent before execution using tamper-proof attestation records.