Platform Features

A governance engine
for every organisational action.

Every action passes through a five-part pipeline: policy evaluation, workflow orchestration, notification delivery, decision recording, and lifecycle management.

The system is deterministic, fail-closed, and action-agnostic - it evaluates governance rules generically, regardless of the action category.

1Policy Engine
2Workflow Engine
3Notifications
4Decision Ledger
5State Manager
Core Infrastructure

Four engines that power every governance decision.

Each engine handles a critical part of the governance pipeline, working together to evaluate, route, record, and notify.

01
Policy Engine
Define governance rules as structured policies with conditions, priorities, and scopes. The engine evaluates every action deterministically - same inputs always produce the same outcome.
Key capabilities
  • Priority-based resolution with scope hierarchy
  • Conditions with AND/OR logic operators
  • HARD_DENY short-circuits immediately
  • Fail-closed: no matching policy defaults to DENY
  • Stateless, atomic, tenant-scoped evaluation
02
Dynamic Approval Workflows
Approval chains assemble dynamically based on policy output - not a fixed sequence. Different roles activate depending on the action context, thresholds, and organisational hierarchy.
Key capabilities
  • Sequential multi-stage approval with configurable thresholds
  • Separation of duties - initiators cannot approve their own requests
  • Delegation and out-of-office support with full audit trail
  • Revision requests with configurable max revisions
  • Optimistic locking for concurrency handling
03
Decision Ledger
Every governance action is recorded as an immutable, append-only entry. The complete lifecycle - who submitted, which policies were evaluated, who approved, and when - captured with full traceability.
Key capabilities
  • Append-only logging with database-level immutability
  • Structured event types for every governance action
  • Tenant-scoped queries with encrypted storage (AES-256)
  • Plan-based data retention (1, 3, or 7 years)
  • Legal hold mechanism for lawful preservation requests
04
Notification System
Multi-channel alerts that keep approvers informed without blocking the governance pipeline. Notifications respect each approver's timezone and business hours.
Key capabilities
  • In-app real-time notifications via WebSocket
  • Transactional email for approval requests and status updates
  • WhatsApp Business API for critical escalations
  • Configurable reminder cadence (12h, 20h, escalation at 24h)
  • Fire-and-forget delivery - never blocks the pipeline
Platform Capabilities

Everything an organisation needs for structured governance.

Built for global, multi-tenant operations from day one.

Organisation Hierarchy
Model your organisation with a multi-tier hierarchy supporting locations, departments, teams, and roles. Policies scope to any level.
Location-Aware Governance
Currency evaluation, timezone-aware SLAs, business hours scheduling, and location-specific compliance policies across offices worldwide.
Escalation Logic
Automated escalation when approvers are unresponsive - up the hierarchy, to peers, or across locations. Cross-location peer escalation included.
State Machine
Full lifecycle management from DRAFT through APPROVED, REJECTED, or EXPIRED. Every transition is validated, logged, and irreversible.
Multi-Tenant Isolation
Row-level security with tenant_id on every table. Complete data isolation between organisations with plan-based limits and controls.
AI-Assisted Governance
AI analyses documents at submission, surfaces relevant policies during evaluation, and provides context to approvers. Policy rules enforce the outcome.
Role-Based Access Control
System roles from Tenant Admin to Auditor, with context-aware assignments. Users can hold different roles across different departments.
API-First Architecture
RESTful API surface covering tenants, organisation hierarchy, requests, approvals, policies, delegations, audit queries, and notifications.
Action-Agnostic

One engine governs every action category.

The policy engine evaluates governance rules generically - the same pipeline handles a $50 expense and a $5M partnership agreement. No hard-coded rules, no per-category logic.

Financial
  • Purchase requests
  • Vendor payments
  • Budget approvals
  • Expense reimbursements
HR / People
  • New hire onboarding
  • Terminations
  • Promotions
  • Salary changes
Documentation
  • Policy updates
  • Contracts
  • Compliance filings
  • SOP revisions
Partnerships
  • Vendor agreements
  • Partnership MoUs
  • Client onboarding
  • Data sharing
IT / Access
  • System access grants
  • Role changes
  • Data exports
  • API key generation
Legal
  • NDA submissions
  • Regulatory filings
  • Audit responses
  • Litigation holds
Operations
  • Office setup
  • Equipment allocation
  • Facility access
  • Travel requests
Policies define the rules. The engine enforces them. The ledger records everything.
Policy Scoping

Policies scope to any level of your organisation.

Define governance rules that apply globally, to specific locations, departments, teams, or individual roles. When policies conflict, priority and scope hierarchy resolve them deterministically.

Higher priority always wins. Within the same priority, narrower scope wins. HARD_DENY short-circuits immediately. No ambiguity.

1
GlobalEntire tenant

All purchases over $10K require CFO approval

2
LocationSpecific office

UK hires require GDPR data protection officer review

3
DepartmentSpecific department

Engineering hires above L5 require VP approval

4
TeamSpecific team

Backend team production access requires Tech Lead sign-off

5
RoleSpecific role

Contractors are hard-denied production database access

Early Access

See governance infrastructure in action.

Request early access to explore the full platform - policy engine, approval workflows, decision ledger, and more.