Audit
without surveillance.

Two halves, kept apart by design. Your org sees every conversation but never the author. OurAI sees every author but never the conversation. Joining the two is rare, deliberate, and itself audited.

Two halves. Neither is the whole picture.

Conversations and identities live on opposite sides of a wall. Each side, on its own, can answer most audit questions. Bringing them together requires ceremony — and that's the point.

Every conversation. No authors.

Your auditors and compliance team can read the full transcript of any conversation that ran on your tenant. The author column shows an opaque GUID — not a name, not an email.

  • Full prompt + response content
  • Model called, tools invoked
  • Browseable, searchable, exportable
Every author. No conversations.

The mapping from GUID to identity is never surfaced in the audit view. Linking the two is possible — but only through a formal process, with a second signature and a permanent record.

  • GUID to identity mapping only
  • Never surfaced without a formal join
  • Access expires automatically after the join window

Always manual. Always logged.

When a real investigation needs author + content together, the wall comes down — but only for that one query, only for that one auditor, and only with another's signature. The reveal is itself an audit event.

§ 01
Auditor requests

The auditor names the GUID and states a reason which is retained permanently on the log entry. No join without a stated reason.

§ 02
Co-signer approves

A second auditor reviews the request and co-signs before access is granted. No single person can perform a join alone, ever.

§ 03
User is notified

The moment the join is approved, the identified user receives an email notification of the audit — immediately, no delay, no batching.

§ 04
Reveal is logged

No matter the outcome, the join leaves a permanent record. Including who asked, reason, and who approved. This entry can never be deleted.

ENCRYPTED AT REST

Audit logs and conversation content are encrypted at rest. Tenant-isolated keys, never used to train vendor models.

Read the Data Safety stance

See what you need to. Nothing more.

Sign up & start in minutes, or book a demo to see if OurAI is the right fit.