Secure AI Atlas mark Secure AI Atlas SECURITY & GOVERNANCE

Operational boundaries

Controls Catalogue

Control patterns that turn AI use into observable work: owners, boundaries, approvals, logs, exceptions, and evidence.

Off-Agent Authorization for Tool Calls

A control pattern that enforces identity-bound authorization and policy decisions outside the agent runtime before tool calls execute.

authorization access control agents MCP prompt injection tool invocation

Approved AI Tool Register

A maintained record of approved AI tools, allowed use cases, owners, data limits, account requirements, and review status.

inventory governance shadow AI

Data Classification Before AI Use

Classifying data before AI use defines what may be shared, transformed, summarized, retained, or logged.

data security classification privacy

Human Approval for High-Impact Actions

Human approval prevents sensitive AI-assisted actions from moving directly from model output to execution.

agents oversight operations

Prompt and Output Logging

Prompt and output logging preserves enough interaction evidence to support review, monitoring, audit, and incident response.

logging monitoring audit