Know who owns each process, who changed it and who can see it.
Owners verify that their processes are still current, roles and grants decide who sees and edits what, and one audit ledger records every change, including changes by Wisp, the AI in Geist, and the AI Team.
Six controls that run on every process
- Org graph
The organization your processes run in
The org graph holds units, positions and people. Structure, directory and audit each get their own view, and sensitive fields need their own permission.
- Every edit is versioned and can be restored exactly
- Contact details stay hidden without the contact permission
- Ownership
Every process has an owner
The owner registry lists who is responsible for each process, filterable and exportable as CSV. Owners see their processes, open sign-offs and pending approvals in one place.
- My and Assigned views for each owner
- Promotion to the published version needs the owner's approval
- Review
Owners confirm a process is still current
Each process carries a freshness state. Owners verify it, delegate the review or request one, and every verification is stored as a receipt.
- Contributor drafts from guided modeling go to the manager for review
- AI changes are kept or undone per batch, and the decision is saved
- Access
Roles and grants decide who sees what
A central policy checks the caller's capability on every protected route. Per-model grants give view, comment, edit or manage access with an optional expiry date.
- Actions a role cannot perform are hidden in the interface
- Process owners can invite guests by email to a single model
- Audit
One ledger for every change
Model edits, renames, deletions, sharing changes and migration runs all land in the History > Audit ledger, filterable by resource, source and run.
- AI runs list their tools, web searches, usage and cost
- Version history with compare and restore on every model
- Agent authority
Agents act with a person's authority
An interactive AI run uses the authority of the person who started it. Scheduled work runs under a named sponsor and re-checks membership, resource access and policy on every operation.
- Revoking access stops the affected work
- Audit entries show the run without exposing private credentials
Questions about governance
Is Geist certified, for example under ISO 27001 or SOC 2?
Not yet. This page describes controls built into the product. Contact us for the current state of our security program.
Can an AI agent change a model without review?
That depends on the mode an admin sets for AI modeling. In Read mode Wisp changes nothing. In Review mode it applies the changes from each turn as one batch that a person keeps or undoes. In Write mode changes apply directly and land in the audit ledger. Scheduled agents run under a sponsor whose access is checked on every operation.
How fine-grained is access?
Roles set what a member can do across the organization. Grants on a single model add view, comment, edit or manage access for named people, optionally until a set date.
Can I export the audit trail?
The AI execution audit exports runs, tools and costs. The owner registry exports as CSV.
Where governance shows up
See the controls on your own processes
We set up owners, reviews and access for a sample of your library in a walkthrough.