Enforce AI policy in the request path. Prove every decision.
AssuranceOps is the self-hosted governance control plane for AI agents, MCP, and model traffic — enforcing policy inline and producing durable, independently verifiable evidence.
Newest work: governed provider enforcement on every route, replay-safe alert transitions, and provider token telemetry. All features →
One identity, one governed decision, one independently verifiable evidence bundle.
Every AI request should have an owner, a policy, and a record.
Shadow AI usage
Any team can call any model provider, enable any tool, or connect any MCP server — with no central record.
No audit trail
When compliance asks who used AI, for what, and at what cost, there is no answer to give them.
Policy without enforcement
Approved-model lists live in a wiki. Nothing in the request path actually stops a violation.
Four promises, one control point.
Enforce
Every AI, MCP, and cloud-app call is judged before it runs. Deny always wins, every allow-list is default-deny, and a blocked request never spends a token.
See what it enforces →Prove
Each decision becomes a hash-chained record you can verify offline, sign with Ed25519, and anchor outside your own store.
See the evidence →Operate
Turn that evidence into posture, alerting, response playbooks, and reports your security team can run day to day.
See the workflows →Deploy
A single static binary inside your infrastructure, in front of the providers you already use. No SDK rewrite, no application change.
See how it fits →The built-in dashboard at /admin — sample data. See operations →
Running in an afternoon, not a quarter.
Deploy in your infrastructure
One static binary with a Docker Compose quick start — or the shipped Helm chart for a highly available Kubernetes deployment.
Point your applications at it
A base-URL change plus a virtual key. Clients keep calling the standard OpenAI and Anthropic paths, streaming included.
Bind teams to policy
Each client key or directory group maps to a named policy, or starts from a shipped compliance pack.
Evaluate AssuranceOps in your own environment.
Request access for deployment guidance and roadmap conversations, or run the open-source demo now to see policy enforcement and verifiable evidence end to end.
By joining, you agree to our Privacy Policy and Terms.