Governance of AI and agents
This part is for managers, administrators and data protection officers who decide how AI is used on an Exponential installation, and who must answer for it afterwards. It explains the controls the software gives you and how to turn them into rules your organization can follow.
Contents
Every page in this part
| Page | What it answers |
|---|---|
| Privacy and data leaving the site | What goes to an AI provider, how the data policy limits it, what is kept, and the EI: Summary page |
| Cost control | Estimated cost per request, limits, budgets for queued work, lanes and batches |
| The audit trail for AI | The audit channel ai, API key and token events, and how to give an auditor exactly that |
| Roles and least privilege | Accounts and roles for assistants and agents, and how to check them |
| An AI use policy for your organization | A template to adapt, with the settings that enforce each rule |
| Incident response for AI | What to stop first, where to find out what happened, and how to recover |
The questions governance must answer
| Question | Where the answer comes from |
|---|---|
| Who may use AI, and for what? | Roles with the expai/* policies (Permissions for AI features) |
| Which content may go to which provider? | The data policy (Privacy and data leaving the site) |
| Who approves AI-written content? | An approval workflow (Drafts and human review) |
| How much may it cost? | Limits and budgets (Cost control) |
| What happened, and who did it? | The audit trail (The audit trail for AI) |
| Which agents may act on the system, as whom? | Accounts and credentials (Roles and least privilege) |
| How do we stop it? | The master switch and the veto hook (The master switch and the veto hook) |
The software records and enforces; it does not assess. Whether a provider's terms meet your legal obligations is a decision for your organization and its advisers.
Related pages
- AI, agents and agentic: start here
- Security basics for businesses
- GDPR basics
- Free documentation: this page is free to copy, translate and improve under the GNU FDL 1.3.
Become an Exponential Partner
Partners share their information, provide funding, contribute back and develop the products with us, and that is how Exponential grows. A partner website and dashboard are planned for mid-2027: please become a partner today to speed up our growth rate and land new features faster.