Ask from your assistant
Connect the assistant you already use to your tenant. It reads records and drafts. A named person passes the gate.
How sign-in works
Five plain steps.
- Add the tenant's address to your assistant.
Your administrator gives you one address for your institution's tenant.
- The assistant sends you to your own sign-in.
Microsoft Entra, Google Workspace or Okta. You never type a GovernanceOS password.
- You approve what the assistant may do.
Read, and draft. The screen says plainly that it cannot pass a gate.
- Your institution's policy decides.
The administrator's allow-list says which assistants may connect at all. In banking the default is denied, until a recorded boundary decision changes it.
- Every call is logged.
Which assistant, which user, which tool, and hashes of the arguments and the result. You can read the log in full.
Assistants
Named in text. Tested before we say so.
| Assistant | Sign-in | Reads | Drafts | Record content goes to | State |
|---|---|---|---|---|---|
| Microsoft Copilot | Your identity provider | designed | designed | the assistant vendor, under your own agreement with it | to verify |
| Copilot Studio | Your identity provider | designed | designed | the assistant vendor, under your own agreement with it | to verify |
| Claude | Your identity provider | designed | designed | the assistant vendor, under your own agreement with it | to verify |
| Claude Code | Your identity provider | designed | designed | the assistant vendor, under your own agreement with it | to verify |
| ChatGPT | Your identity provider | designed | designed | the assistant vendor, under your own agreement with it | to verify |
Learn more about what verified means
"Verified" means we have signed in, read and drafted from that assistant against a test tenant on the stated release. Until then a row says "to verify".
What an assistant may write
Drafts, never decisions.
May
- Read any record the signed-in person may read
- Draft a gate record, which stays a draft
- Draft a note, a finding or a template field, marked typed
- Ask for a pack to be built for a person to export
May not
- Pass a gate: that needs a signed token from the named approver
- Change an approver, a boundary or an assistant policy
- Alter or delete evidence, or any version in the chain
- Act for a person who has not signed in
The metadata profile
What the tenant tells an assistant, and keeps.
| Field | Kept in the audit log |
|---|---|
| Assistant identity | Yes |
| Signed-in person and role | Yes |
| Tool called | Yes |
| Argument hash | Yes, SHA-256 |
| Result hash | Yes, SHA-256 |
| Arguments and results themselves | No |
Where does your institution stand?
Four questions place you on four altitudes, free, and your answers stay in your browser. Or book thirty minutes on your regime and your gaps.