TENURED BY IGNITE9 · SECURITY AND GOVERNANCE
Security and governance for AI production support.
Tenured by Ignite9, the AI production support team for enterprise applications, is built so your people keep authority over your systems: access you grant, approvals with segregation of duties, a sealed audit trail and a data boundary you set.
THE CONTROLS
Digital employees, governed like employees.
Access you grant, step by step
Each digital employee holds only the access your security team grants. When a ticket needs more, it asks the team that owns that access for the least access for the shortest time, with the ticket’s context. If the team refuses or does not answer in time, the team does the work itself from a complete work package. A digital employee never grants or approves its own access, and never uses access it does not hold.
Approvals and segregation of duties
Production changes wait for a named approver. Requesters cannot approve their own requests. Sensitive settings, such as activating a ticket sync, need a second administrator. Every action passes a policy gateway that allows it, requires approval or denies it.
A sealed audit trail
Every event is stamped by the database’s own clock and sealed into an append-only hash chain for each client, with signed seals where a signing key is configured. Your auditors can export the seals with their events and verify them offline, and you can send the latest seal to your own SIEM.
A data boundary per client
You decide where each class of your data may go, from internal information to personal data, compensation and bank details: which regions, which kinds of provider tenancy, and whether it may reach a model at all. Tenured checks that decision before sending data anywhere, refuses what it does not permit, and records every refusal.
Your choice of models
Choose Claude, OpenAI, Gemini, DeepSeek or others, including models in your own cloud tenancy. Backup models keep the desk answering during an outage, and only backups inside your data boundary qualify. A cost ledger records what every model call cost.
Connectors reviewed before use
Every connector, from the built-in profiles to the more than 31,000 marketplace entries generated from public directories, is reviewed and enabled by your administrators before a digital employee may use it. SAP calls are policy-gated, and writes to ticketing systems stay off until your organization turns them on.
Honest about AI
Every text written to a requester or a ticket carries your organization’s AI disclosure, and every call begins with a disclosure and asks for consent before anything is stored.
Hosted on Google Cloud
Tenured runs on Google Cloud. Sign-in to the console goes through Microsoft Entra ID.
ASSURANCE
What we claim, and what we do not.
Reviewed twice
Every change to Tenured passes a separate QA review and a security review before it ships.
No certification claims
We do not claim SOC 2, ISO 27001 or any other certification today. We walk your security team through the controls and the evidence instead.
Evidence you can check
The audit trail is built for your auditors to verify themselves, without trusting our word for it.
Report a concern
Email smaan@ignite9.io. How this website itself handles information is on the website security page.
NEXT STEP
Bring one ticket that bounced between five teams.
In a 30-minute demo we walk through Tenured on that process, answer your security team’s first questions and agree the next step. We are opening a limited number of design-partner pilots.