National AI use control · production edition
Register institutions, generate secure deployment kits, inspect AI use, and export audit evidence without storing raw sensitive content.
Ready to refresh.
Loading…
No institution action yet.
Create the institution workspace first, then send password-setup instructions to its verified administrator. Public self-signup remains disabled.
No administrator invitation sent.
The approved inventory for websites, desktop applications, local model runners, APIs, and browser extensions.
| Tool | Type | Decision | Coverage |
|---|---|---|---|
| Refresh the registry to load tools. | |||
No registry action yet.
New websites and applications reported automatically by managed browsers, endpoints, gateways, DNS, proxies, and firewalls.
| Discovered item | Source | Status | Action |
|---|---|---|---|
| No discoveries loaded. | |||
Use synthetic metadata only. Managed devices normally report this automatically.
No discovery action yet.
Enroll institution computers and monitor Browser Guard, Endpoint Agent, application discovery, and policy status.
Copy it directly into the approved device configuration. It cannot be displayed again and is never stored in raw form.
| Device | Platform | Status | Last contact |
|---|---|---|---|
| No managed devices loaded. | |||
No device action yet.
Review the effective tool and data policy, then publish a numbered release for managed gateways, browsers, and endpoints.
Preview or publish a policy release.
Generate institution-specific gateway, endpoint, browser guard, policy bundle, installation docs, checksums, and a downloadable ZIP package.
No deployment kit generated in this session.
Allowlist an existing Authentication user and assign one controlled role. Institution-scoped roles require at least one institution ID.
No operator action yet.
| Request | Subject | Status | Action |
|---|---|---|---|
| Refresh approvals to load requests. | |||
No approval action yet.
No incident action yet.
No prompt inspected yet.
Managed browsers detect the destination automatically. Operators do not maintain URLs during normal use.
No upload inspected yet.
No code scanned yet.
No evidence action yet.
Open Institution Setup, enter the official institution ID, name, sector, and risk tier, then save. This creates the operating workspace used by Prompt Guard, Upload Guard, Developer Guard, deployment kits, and evidence exports.
ministry-office-name or financial-institution-name.critical, high, medium, or standard.Open Deployment Center and generate a secure deployment kit for the institution. The kit contains policy, gateway files, endpoint/browser deployment materials, installation documentation, and checksums. Enrollment secrets are issued only through a separate controlled workflow.
The gateway is installed on an institution server or VM. It receives AI-use inspection requests from the browser guard, endpoint agent, proxy/DNS/firewall integrations, and approved AI workspaces.
/health, /policy, and /inspect before staff rollout.Install the Browser Guard on managed Chrome/Edge browsers and the Endpoint Agent on approved staff computers. These components detect risky AI websites, file upload attempts, sensitive text, clipboard leakage, code secrets, and unapproved AI tools.
Use the guard modules for daily checks and controlled validation.
Open Evidence to verify the tamper-evident audit chain and export regulator-ready evidence. Evidence should include institution, deployment kit, guard decisions, blocked events, hashes, and executive summary.
| Step | Owner | Output |
|---|---|---|
| Approve operating scope | Executive sponsor + security office | Institution, users, risk scope, and success criteria |
| Create workspace | National or institution operator | Institution record and policy context |
| Generate kit | AIGuard operator | Signed ZIP, SHA-256 sidecar, installation guide |
| Install gateway | IT/network team | Gateway service reachable and health checked |
| Enroll devices | IT endpoint team | Browser/endpoint guards active on approved computers |
| Enforce network policy | Network/security team | Unapproved AI bypass paths blocked or monitored |
| Run acceptance tests | Security + department users | Allowed public prompt, blocked restricted upload, blocked risky code |
| Export evidence | Auditor/operator | Evidence ZIP and verified audit chain |