§ Enterprise ControlsDocument · REG-ENT-2026.06

Configurable for operators. Auditable for the people who answer to a regulator.

Single sign-on, role-based access, scoped service tokens, key rotation, PII masking, cost ceilings, and a daily digest — the controls that move a pilot from “interesting” to “approved.”

People & Access, Members — the team with roles, status, and an Invite via SSO action, plus pending invitations.
Your team, your rolesMembers, roles, and SSO invites — admin-gated
§ 01Identity

Identity and access.

Single sign-on, role-based access control with workspace roles and groups, and admin-gated settings.

A read-only RBAC capability matrix mapping Owner, Admin, Member, and Underwriter against twenty capabilities.
Auditable by designA read-only RBAC capability matrix — roles × capabilities
§ 02Programmatic

Programmatic access, scoped.

Scoped service tokens let other systems call Regisseur without ever issuing them a user identity — external callers never get user credentials. Credentials are stored in a managed secret backend with key rotation built in.

Settings, API Keys — machine-to-machine service tokens, workspace- and capability-scoped, with last-used timestamps and no secret values shown.
Scoped service tokensWorkspace- and capability-scoped — no secret values shown
§ 03Data protection

Data protection.

PII/PHI masking is configurable per workspace and applied before prompt assembly — redaction as a compiler pass, not a runtime hope. Single-region storage; per-workspace retention.

The masking settings — PHI and PII field masking hashed before the database write, with configurable patterns and an enable toggle.
Masking before writePHI/PII fields hashed before the DB write, configurable per pattern
§ 04Cost

Cost controls.

Set budget ceilings per workspace; the per-job circuit breaker enforces runaway-cost limits. Cost is measured on real token usage, never fabricated.

Cost controls — a per-job cost cap, an execution multiplier, and a circuit-breaker policy.
Cost controlsPer-job cost cap, execution multiplier, and circuit-breaker policy
§ 05Visibility

Visibility.

A daily digest summarizes what happened and what needs attention; ops trends show throughput, cycle time, and SLA health over time.

The operations dashboard trends — workspace spend, cost per case, agent spend, and weekly cases-completed, cycle-time, and automation-rate charts.
Trends over timeSpend, cost per case, cases completed, cycle time, automation rate
§ Next step

The controls your security team will actually ask for.

Bring your security and compliance checklist. We'll walk identity, scoped tokens, masking, cost ceilings, and the audit surface — and send the security & compliance package for your review.

Request the security package →Read the security model
Identity
SSO · RBAC · groups
Access
Scoped tokens · key rotation
Data
Masking · single-region · retention