Trust and tenant control

AI control center

One governed boundary for identity, tenant access, subscription rights and audit evidence.

Enforcement designed

01OIDC ready

Identity boundary

Issuer, audience, signature and token lifetime are verified server-side. Production fails closed.

02RLS enforced

Every protected table resolves access through the authenticated organization membership.

036 roles

Owner, admin, operator, analyst, auditor and viewer privileges follow least access.

04Append only

Security and operational decisions can be inserted and reviewed, never rewritten or deleted.

Access matrix

Least privilege

OwnerBilling, security and organization control

AdminPeople, workspaces and platform policy

OperatorInvestigate, approve and run permitted actions

AnalystInvestigations, evidence and reporting

AuditorRead-only audit and compliance access

ViewerRead-only operational visibility

Commercial controls

Subscription rights are resolved per organization and remain independent from user-editable identity data.

Agent executionsPlan limit

Metered

ServiceNow workspaces1 included

Enabled

Write-capable toolsApproval required

Controlled

Audit retention90 days baseline

Enabled

Security invariantNo tenant-owned query executes without a verified subject and organization context.

identity → membership → workspace → entitlement → audit