Your company's brain
Your AI runs
your company's rules.
Not its training data. Not prose. Not hallucinations.
Every answer is a typed function your expert signed.
“Discounts above 10% require VP approval. SDR cap is 5%.”
The primitive
A Ctrl is one signed rule.
Your AI doesn't make decisions. It invokes these.
Every answer your AI gives is the typed output of a function your expert signed. Watch one form, end to end.
Now every AI surface in your company invokes the same Ctrl.
Slack, voice, email, web chat, MCP partners — one signed library, one decision.
The library
Your company's brain. It grows every day.
Every doc you upload, every rule your expert signs — a new Ctrl, bound to a real human in a real department.
Every AI surface in your company gets smarter together. Green pulses are invocations happening right now.
The hub
Every model. Every system. Every answer. Through your signed library.
Watch an invocation route through your signed library to a specific Ctrl — which decides whether to call a model, pull from data, or both — then return as a typed reply with a sealed receipt.
What makes this different
Every SaaS has AI now. Only one has signed Ctrls.
ChatGPT, Slack AI, Monday AI, HubSpot AI — all run a language model on someone's data. None are signed. None are typed. None can tell you who's accountable.
01 · LLM only
ChatGPT, Claude, Gemini
An averaged voice with no company knowledge.
02 · SaaS AI
Slack AI · Monday AI · HubSpot AI
Each app makes decisions independently. No audit trail. No signed rules.
03 · Ctrl AI
Your signed library
One library. Signed by your team. Invoked from every surface.
They build AI on their data.
We build the library your data signs.
The router
The cheapest model that's safe enough.
Every signed Ctrl declares its trust requirement. The router picks the cheapest frontier model that satisfies it.
Most Ctrls run on Haiku — 5× cheaper and 5× faster than Opus. Opus only when the Ctrl explicitly requires it.
BYOK at every tier — your model spend is your bill from your provider, not us. We don't mark up tokens.
Lifecycle
When your docs change, your AI changes.
But only after a human signs.
No silent updates. No drift. When the policy moves, the Ctrls bound to it move to review pending. Your AI keeps the old rules until your expert reads the diff and re-signs. The receipts chain shows every version forever.
Today
Signed and current
discount-policy v3 is signed. All bound Ctrls are verified.
Ctrls bound to this policy · 3
Pricing
Every tier ships the same receipts.
Three tiers. The transparency log, the signed Ctrls, the audit trail — every tier gets the full system. Tier is signers and library size, never features.
Team
- ✓Up to 5 signers
- ✓25 signed Ctrls
- ✓Community packs
- ✓BYOK
Company
Recommended- ✓Up to 25 signers
- ✓100 signed Ctrls
- ✓Premium packs (SOC 2, GDPR)
- ✓Slack · voice · email · web · MCP surfaces
- ✓Audit-grade transparency log
Enterprise
- ✓Unlimited signers + Ctrls
- ✓SSO + SAML + audit roles
- ✓Dedicated infrastructure
- ✓Custom packs + co-signed by your experts
- ✓Procurement / DPA / red team support
Start in 60 seconds
Drop a doc.
Be running in 60 seconds.
Upload your first policy. Three signed-Ctrl drafts come back. Sign one — your AI is now invoking your rules. From every surface.
Or book a demo