§ Enterprise ControlsDocument · REG-ENT-2026.06

Configurable for operators. Auditable for the people who answer to a regulator.

Single sign-on, role-based access, scoped service tokens, key rotation, PII masking, cost ceilings, and a daily digest, the controls that move a pilot from “interesting” to “approved.”

People & Access, Members: the team with roles, status, and an Invite via SSO action, plus pending invitations.
Your team, your rolesMembers, roles, and SSO invites · admin-gated
§ 01Identity

Identity and access.

Single sign-on, role-based access control with workspace roles and groups, and admin-gated settings.

A read-only RBAC capability matrix mapping Owner, Admin, Member, and Underwriter against twenty capabilities.
Auditable by designA read-only RBAC capability matrix · roles × capabilities
§ 02Programmatic

Programmatic access, scoped.

Scoped service tokens let other systems call Regisseur without ever issuing them a user identity. External callers never get user credentials. Credentials are stored in a managed secret backend with key rotation built in.

Settings, API Keys: machine-to-machine service tokens, workspace- and capability-scoped, with last-used timestamps and no secret values shown.
Scoped service tokensWorkspace- and capability-scoped · no secret values shown
§ 03Data protection

Data protection.

PII/PHI masking is configurable per workspace and applied before prompt assembly: redaction as a compiler pass, not a runtime hope. Data stays inside your deployment, in your region; per-workspace retention.

The masking settings: PHI and PII field masking hashed before the database write, with configurable patterns and an enable toggle.
Masking before writePHI/PII fields hashed before the DB write, configurable per pattern
§ 04Cost

Cost controls.

Set budget ceilings per workspace; the per-job circuit breaker enforces runaway-cost limits. Cost is measured on real token usage, never fabricated.

Cost controls: a per-job cost cap, an execution multiplier, and a circuit-breaker policy.
Cost controlsPer-job cost cap, execution multiplier, and circuit-breaker policy
§ 05Visibility

Visibility.

A daily digest summarizes what happened and what needs attention; ops trends show throughput, cycle time, and SLA health over time.

The operations dashboard trends: workspace spend, cost per case, agent spend, and weekly cases-completed, cycle-time, and automation-rate charts.
Trends over timeSpend, cost per case, cases completed, cycle time, automation rate
§ Next step

The controls your security team will actually ask for.

Bring your security and compliance checklist. We'll walk identity, scoped tokens, masking, cost ceilings, and the audit surface, and send the security & compliance package for your review.

Request the security package →Read the security model
Identity
SSO · RBAC · groups
Access
Scoped tokens · key rotation
Data
Masking · your region · retention