AI Governance Platform for SMEs
GenAI DLP, AI prompt security, and shadow AI detection with complete audit trails. Browser-based governance that lets your team use AI with confidence.
Confident answers to any question
When someone asks "how does your team use AI?" (whether it's an auditor, a client, or your board) you want a confident answer.
Your team uses AI hundreds of times each week. That's a real edge. Governance isn't about limiting that edge. It's about understanding it, demonstrating it, and building on it.
Vireo Sentinel gives you that foundation. Complete visibility, automatic audit trails, and demonstrable oversight. Without blocking innovation.
Complete audit trails
Every AI interaction logged, timestamped, and ready for review.
What we capture
- User identity and email
- AI platform and model used
- Prompt content (redacted)
- Risk score and categories
- Intervention shown and response
- Timestamp (ISO 8601)
- Browser and extension version
Retention by tier
- Free: 7 days
- Starter: 30 days
- Business: 90 days
- Custom: Up to 2 years
Admin access logs retained for 7 years regardless of tier (GDPR Article 30 compliance).
Privacy-first storage
- All prompts redacted before storage
- Sensitive data never reaches our servers
- Organisation data completely isolated
- Automatic expiration per tier
- Admin access logged immutably
Conversation-level understanding
Not just isolated prompts: complete conversation threads for context.
- Complete conversation threads linked together
- Session tracking (new vs resumed conversations)
- Multi-day conversation analysis
- Context for compliance investigations
GenAI DLP: AI prompt security that works
Real-time AI data loss prevention across 50+ patterns, protecting sensitive data before it reaches AI platforms.
Personal Information (PII)
Social Security Numbers, Tax File Numbers (AU), National Insurance Numbers (UK), credit cards, IBANs, email addresses, phone numbers
Financial Data
Bank account numbers, routing numbers, cryptocurrency wallets, trading accounts, currency amounts in context
Technical Credentials
API keys (AWS, Azure, GCP, OpenAI, Anthropic), JWT tokens, database connection strings, SSH keys, GitHub tokens
Healthcare Information
Medical Record Numbers, insurance policy numbers, HIPAA-related terms, prescription information
Legal & Confidential
Case numbers, contract references, confidentiality markers, proprietary information flags
File Attachments
Metadata analysis for .env, .key, .pem, .sql, .xlsx, .csv, .zip files (explicit acknowledgment required)
AI risk management: From detection to decision-making
Risk data becomes strategic intelligence. See patterns, identify training needs, and demonstrate governance in action.
Targeted training
Know which teams need guidance on specific risk categories
Early warning
Spot emerging patterns before they become incidents
Compliance posture
Track your governance effectiveness over time
We don't use AI to protect against AI
Our GenAI DLP uses deterministic pattern matching, not machine learning. This means consistent, predictable results you can explain to auditors. No black box. No surprises.
Risk scoring system
Clear, consistent scoring from 0-100 with defined thresholds.
Low Risk
General questions, public information, non-sensitive topics. Captured for audit trail, no user interruption.
Medium Risk
Possible sensitive terms, business terminology. Visual indicator shown, user may proceed.
High Risk
Clear sensitive data patterns detected. Intervention modal requires user acknowledgment.
Critical Risk
Definite sensitive information (SSN, credit card, API key). Blocked until action taken.
Smart Guardrails
Intelligent protection that knows when to step in, giving your team clear options when it does.
Why human-centered? Because your employees are professionals making judgement calls. Sometimes that "SSN" is example data in documentation. Sometimes that "confidential" marker is from a public source. We give them the information to decide, and log the decision for your records.
Compliance-ready architecture
Built with regulatory requirements in mind from day one.
GDPR-Ready
- Data minimisation principles
- Automated data deletion
- Organisation-isolated storage
- Admin access auditing (7-year logs)
- User consent tracking
SOC2-Aligned
- Immutable audit trails
- Role-based access control
- Encryption at rest and in transit
- Monthly partitioned storage
- Access control logging
Enterprise Security
- Firebase Authentication (JWT)
- PostgreSQL Row-Level Security
- Google Cloud infrastructure
- TLS 1.2+ encryption
- PCI DSS compliant payments (Paddle)
Current focus: Self-governance, risk management, and operational AI insights. We're building toward full compliance outcomes for regulated industries. Contact us if you need ISO 42001 support, extended retention, or industry-specific features.
Common questions
What we hear from teams evaluating AI governance.
Size doesn't determine risk. A 10-person company sharing client data with ChatGPT faces the same exposure as a 1,000-person enterprise. The difference is that smaller teams often lack visibility into what's being shared. Vireo Sentinel is designed specifically for SME budgets and complexity, not enterprise overhead.
They probably wouldn't intentionally. But accidents happen: a client name in a prompt, an API key in a code snippet, confidential data copy-pasted for quick analysis. These aren't malicious acts, they're workflow shortcuts. Vireo catches them before they become problems, without assuming bad intent.
Training helps, but humans make mistakes, especially under deadline pressure. Vireo provides a safety net that catches what training misses. Plus, our interventions are educational: employees learn why something was flagged, improving their judgment over time without formal training sessions.
Bans don't work. They just push AI usage underground. Your team is already using AI tools (we guarantee it). The choice isn't whether they use AI, but whether you have visibility when they do. Governance that enables beats prohibition that employees work around.
Traditional DLP blocks and logs. Vireo provides visibility, guidance, and audit trails specific to AI workflows. We're human-centered: employees get clear options (Cancel, Redact, Edit, Override) rather than binary block/allow decisions. And we're purpose-built for AI platforms, not adapted from email scanning tools.
ChatGPT Enterprise and Claude for Business have privacy features, but they only protect data within their own platform. More importantly, their security doesn't give you visibility. You can't see what's being shared, track patterns, or demonstrate governance to auditors. Your team uses multiple AI tools, and you need visibility across all of them. Vireo provides unified governance regardless of which platforms your team chooses.
Ready to demonstrate AI governance?
Start with a free account. No credit card required.