The governed agent operating system

Run every AI agent.
Control every action.

GovernSecureProve

Bring Claude, ChatGPT or your own agents. Keep your files and memory in one place every agent can use. Automate real work with Co-workers in Slack, meetings and routines. Every action is checked, approved or blocked before it runs.

Illustrative workflow

Project update team channel

1
Read project issuesAccess project issues from Jira
Allowed
2
Draft a team updateUse AI to summarize and draft a message
Ready
3
Post to #project-updatesSend the update to your team channel
Approval required
REVIEW BEFORE POSTING
Release testing is complete. Two issues need follow-up.
Destination#project-updates
Requested byAlex's co-worker
4
Execution recordDetails will be available after execution
Available after execution
01
Bring your AI

Claude, ChatGPT and your own agents through one secure gateway.

02
Connect your knowledge

Files and memory that carry across every agent and session.

03
Automate the work

Co-workers in Slack, meetings and scheduled routines.

04
Stay in control

Policy, approvals and audit on every action, before it runs.

Govern the agents your teams already use, under one policy. Claude, ChatGPT, Copilot, and any MCP client connect through the same governed gateway.

The problem

Your board is asking how you govern AI. Right now, you cannot answer.

AI agents are already acting inside your company: calling tools, touching data, taking actions, mostly ungoverned. Without a control plane there is no single policy, no proof, and no way to stop a risky action before it runs.

Without a control plane
✗Shadow AI: agents your teams adopted are calling tools with no central policy.
✗Ungoverned tool calls. Every agent can reach any tool, including destructive ones.
✗No audit trail, no accountability, no evidence when the board asks how you govern AI.
✗Credentials sit inside agents. Secrets leak into logs and prompts.
✗Sensitive data flows unredacted into logs and telemetry pipelines.
✗Risky actions run immediately, with no human review before something irreversible happens.
With CortexHub
✓One policy across every agent, enforced at runtime at the MCP gateway.
✓Least privilege: you decide what each team can reach. Block-by-default fallback.
✓One audit trail and evidence, mapped to SOC 2, ISO 42001, EU AI Act, and NIST AI RMF.
✓Credentials stay in the vault. Agents never see vendor secrets.
✓PII and secrets are redacted before anything reaches storage.
✓High-risk actions wait for human approval before they run.
One platform, every agent

Every agent your company runs, on one governed platform.

Give every employee a Co-worker, give every team a shared agent, and bring the assistants people already use. Every one of them goes through the same gateway, the same policy and the same audit trail.

Runtime policy gatewayEvery action is checked before it runs
Live policy
Agents
Claude
ClaudeMCP, signed in as a member
ChatGPT
ChatGPTMCP, signed in as a member
Copilot
CopilotMCP, signed in as a member
Your own agents
Your own agentsSDK, scoped agent key
and any MCP client
CortexHub gateway
  1. 1
    IdentityWhich agent, acting for whom
  2. 2
    PolicyAllowed for this agent, tool and data?
  3. 3
    Content safetyPrompt injection and sensitive data
  4. 4
    ApprovalA person decides when the rule says so
  5. 5
    AuditTamper-evident record of the decision
Credentials stay in the vault. Agents never see them.
Decisions on your tools
GitHubGitHubRead pull requestAllowed
GitHubGitHubMerge to mainNeeds approval
SlackSlackPost to #customersNeeds approval
NotionNotionUpdate project pageAllowed
SalesforceSalesforceDelete accountBlocked
StripeStripeIssue large refundNeeds approval
and 100+ more integrations
Context that travels

Your context goes wherever your agents go.

Files, memory and work in progress live in CortexHub, not in any single AI. Start in Claude, continue in ChatGPT, hand off to a co-worker in Slack. Nothing is lost and nothing starts over.

Monday
Claude

Claude

via the CortexHub MCP gateway

Drafts the Q4 pricing one-pager, saves it to your files and remembers the enterprise tier decision.

q4-pricingv1Saved by Claude
Tuesday
ChatGPT

ChatGPT

same workspace, different assistant

Recalls Monday's decision, opens the same file and saves a tighter version 2.

q4-pricingv2Saved by ChatGPT
WednesdayApproval requested
Ava, your co-worker

Ava, your co-worker

in Slack, on a schedule

Turns version 2 into a deck for #leadership. Sending it to a customer waits for your approval.

q4-pricingv3Saved by Ava
Stays in CortexHub
Brain: enterprise tier floor agreed Mondayq4-pricing: 3 versions, latest v3Audit: 9 governed actions, 1 approval

One Brain for every agent

Decisions, people and projects your agents learn stay in CortexHub, not inside one assistant.

Files any agent can open and edit

Any format. Every save is a new version, whoever made it, with the latest one on top.

Governed every step of the way

Every read, write and send goes through the same policy, approvals and audit trail.

Build it, share it, use it

One ask becomes a dashboard the whole team can use.

A Co-worker pulls live data, builds an interactive dashboard and saves it to Files. Share it with a colleague and their own Co-worker can work with it at once. Nothing is copied: one file, one set of versions, and access ends the moment you unshare.

Routines and workflows

Work that runs itself, step by step, with the reasons shown.

Describe the job once and put it on a schedule. Every run shows each step, why the agent took it, which model it used, what it cost and where a person approved. From a five-person team to a regulated enterprise.

Last runChase overdue invoices
StripeGmailSlack
  1. 1
    Find invoices unpaid for 14+ daysDone

    Why: Monday is chase day; the owner only wants invoices past their terms.

    StripeStripe6 invoices, 8,420 EUR
  2. 2
    Draft a polite reminder for each customerRunning

    Why: Customers who paid late before get a firmer tone, per last month's note in the Brain.

    Writing model, chosen for tone
  3. 3
    Send the 6 remindersApproved

    Why: Emails to customers need the owner's sign-off under the finance policy.

    GmailGmailApproved by Sarah in Slack, 08:06
  4. 4
    Post a summary to #financeDone

    Why: The team tracks cash collection in one channel.

    SlackSlack
6 reminders sent, summary posted4 min · 0.31 USD
The Brain

One living map of your work, not a black box.

The Brain is a single living map of your work: the people, projects, conversations, documents, preferences, and lessons your Co-worker learns. It grows from everyday work, keeps one canonical record of each person and project, remembers what matters, and corrects itself when things change. You can see it, explore it, and correct it, so what the Co-worker knows is transparent and auditable.

  • One record for each thing. Explore by People, Projects, Conversations, or a graph view. "The migration" and "Q3 Migration" stay one record, not duplicates.
  • See and correct it. Pin what matters, retract what is wrong, and merge duplicates. Corrections become lasting, governed knowledge.
  • Governed and auditable. Every read and write runs through the same policy and audit as any other agent, so you can audit what it knows.
Sarah ChenProject AtlasQ4 renewalsEnterprise rolloutSecurity reviewCheck invoicesMarcus Lee
PeopleProjectsConversationsLessons
Meetings

A Co-worker that shows up and speaks up.

Your governed Co-worker does not just take notes. It joins the call already knowing your people, projects, and decisions from the Brain, speaks in its own voice, answers questions, and contributes. When the meeting ends, what was decided flows back into the Brain, governed by the same policy as everything else.

An active participant, not a silent notetaker. It participates and remembers. It does not replace the people in the room.

  • The Brain is why it is good. Because the Co-worker learns from everyday work, it walks into the meeting prepared. The better the Brain, the better the participant.
  • Every meeting makes the Brain richer. What is decided in the room becomes lasting, governed knowledge, so the next conversation starts further ahead.
  • Governed like everything else. The same policy, approvals, redaction, and audit trail apply in the meeting as on every other tool call. No separate rules.
Alex's Co-worker · MeetingLive
ChatMeetingBrain
4 participants · Co-worker active
Sarah Chen
Account lead
Marcus Lee
Engineering
Priya Rao
Finance
Speaking
Alex's Co-worker
CortexHub · governed
Alex's Co-worker

“Picking up the renewal thread: last quarter we paused Project Atlas on the security review. That sign-off cleared Tuesday, so we can commit the rollout date today.”

01 · Prepared

Walks in already knowing.

Before the call, the Co-worker draws on the Brain: your people, projects, past conversations, and the decisions that led here. It arrives with context, not a blank page.

02 · Present

Joins the call and contributes.

It is in the room. It speaks in its own voice, answers questions, presents decks, and pulls live numbers or builds a chart while it keeps talking. With someone from outside the company on the call, it holds back internal detail.

03 · Permanent

Every decision flows back.

Decisions, action items, and follow-ups land in the Brain, under the same policy and the same audit trail. Every meeting makes the Brain richer for the next one.

Guardrails in action

What happens when something goes wrong.

Four real situations, played out the way CortexHub handles them. Every guard acts in the path of the agent, applies to every kind of agent, and opens a risk signal that says what happened, why it was a risk and what was done about it.

Risk signals4 today
Ava, a Co-workerWeb chatContent moderation

A threatening request is stopped before any model sees it

  1. A member types a requestScreening

    "Write to the supplier and say we know where their staff live unless they drop the price by Friday."

  2. Screened on input, in every chat surfaceFlagged

    Web, mobile, Slack and routine instructions are checked before the text reaches a model.

    Harassment / threatening0.93Platform floor
    Harassment0.88Your policy
    Violence0.71Your policy
Trust and compliance

Built for the buying committee that has to sign off.

The controls security, IT, and compliance expect, so adopting AI never means giving up control.

Mapped to the frameworks

One audit trail and evidence you can map to SOC 2, ISO 42001, the EU AI Act, and NIST AI RMF. Answer "how do you govern AI" with proof, not a promise.

Tamper-evident by design

Every enforcement record is hash-chained to its predecessor and verifiable offline. Any alteration breaks the chain and names the exact record.

Managed models, tokens at cost

Co-workers run on managed models. CortexHub runs inference and bills tokens straight through at cost, no markup, with a full per-model breakdown.

Isolated per organization

Policy, credentials, audit, and usage are a hard boundary per organization. One team's data is never reachable from another's context.

How we are different

Runtime governance, plus a governed agent.

Tools that watch from above inventory and score your AI, but they do not sit in the path of a call. Automation platforms lead with workflow and add governance later. CortexHub governs at the point of action and gives you a governed Co-worker to deploy, under one policy and one audit trail.

✓
Runtime enforcement at the point of action

Policy evaluated before every tool call, in the path of the action, never after the fact.

✓
One policy across every agent

External agents and Co-workers answer to the same rules, vault, and audit trail.

✓
Approvals for high-risk actions

Risky calls pause for human review, then proceed or are denied. Block-by-default is the fallback.

✓
Redaction and least privilege

PII and secrets are redacted before storage. Each team reaches only what you allow.

✓
Tamper-evident audit trail

Records are hash-chained and verifiable offline, so evidence stands on its own.

✓
A governed agent to deploy

An AI Co-worker with a Brain, on the same policy, not just a view of the AI you already have.

✓
Mapped to the frameworks

One audit trail and evidence you can map to SOC 2, ISO 42001, the EU AI Act, and NIST AI RMF.

✓
Cost savings built in

Advanced compression shrinks tool results before they reach the agent, automatically, so you spend fewer tokens with no configuration.

For developers

Bring your own agents under governance.

The CortexHub Python SDK wraps the agents you build in a governed session. Point your framework at the session and every action is controlled and audited, with no change to your agent logic.

  • One governed session per user, with the MCP URL and headers your framework already understands.
  • Works with the OpenAI SDK, LangGraph, CrewAI, the Claude SDK, or any MCP client, no rewrite.
  • Every tool call runs through the same policy, approvals, redaction, and audit as the rest of CortexHub.
Read the docs →pip install cortexhub
session.py
# Python SDK - per-user sessions
from cortexhub import Cortexhub

session = Cortexhub().session(user_id="user_123")
# session.mcp.url + session.mcp.headers → your MCP framework

# Or add to Claude Desktop / VS Code (GitHub Copilot):
# https://mcp.cortexhub.ai/v1/mcp
Integrations

Every tool your teams use, governed the same way.

Curated toolkits ready to connect, plus your own business systems, governed from day one.

SlackSlack
GitHubGitHub
JiraJira
NotionNotion
ConfluenceConfluence
Google DriveGoogle Drive
HubSpotHubSpot
SalesforceSalesforce
LinearLinear
AirtableAirtable
AsanaAsana
ZendeskZendesk
StripeStripe
ShopifyShopify
FigmaFigma
DatadogDatadog
IntercomIntercom
PagerDutyPagerDuty
SnowflakeSnowflake
ZapierZapier
SentrySentry
DropboxDropbox
And many more
OpenAPIAny REST API you bring
FAQ

Common questions

CortexHub is the governed agent operating system for the enterprise. Connect the assistants your teams already use (Claude, ChatGPT, Copilot and more) through the secure MCP gateway, keep your files and organisational memory in one place every agent can use, and build Co-workers that work in Slack, meetings and scheduled routines. Every action from every agent is checked, approved or blocked before it runs, with one audit trail.
Registry and GRC tools govern from above: they inventory and score your AI, but they do not sit in the path of a tool call and give you nothing to work with. CortexHub governs at the point of action, enforcing policy at runtime on every call, and also gives you a governed agent to deploy. Runtime enforcement plus a governed Co-worker, not a scorecard.
CortexHub Brain is what makes our governed Co-workers different. It is a single living map of your work: the people, projects, conversations, documents, preferences, and lessons your Co-worker learns. It grows from everyday work, keeps one canonical record of each person and project (so "the migration" and "Q3 Migration" are the same thing, not duplicates), remembers what matters, and corrects itself when things change. You can see it, explore it by People, Projects, Conversations, or a graph view, and correct it: pin what matters, retract what is wrong, merge duplicates. It is governed by the same policy as every other agent, and you can audit what it knows.
Yes. Upload files to Organization Files and each member's Co-worker searches the same shared library, scoped to what that member may see, with organization isolation and audit on every search. Files are the Co-worker's own internal knowledge, so external MCP agents that reach your tools through the gateway never touch them.
Organization admins upload or replace documents in CortexHub Cloud and re-index when content changes. Co-workers also build one Brain over time from everyday conversations, keeping a single canonical record and correcting it as things change. Both company and personal knowledge stay scoped to the member and isolated to your organization.
No. Teams keep the clients they already use. CortexHub adds runtime governance and a complete audit trail at the MCP gateway, so the same policy applies whether the call comes from an external agent or a Co-worker.
Co-workers run in CortexHub Cloud on managed models. CortexHub runs inference for you and bills the tokens straight through at cost, with no markup and nothing to configure. External agents keep running wherever they run today; CortexHub adds governance and audit at the point of action.
Yes. Connect the business tools your teams already use, plus custom integrations, under the same policy and audit trail as everything else.
The agent receives a clear response explaining the action was blocked by policy. Nothing runs. The attempt is recorded in the audit trail. Your security team can see exactly what was tried, by whom, and when. The default is block-by-default: calls with no matching policy are denied.
Actions you mark as requiring approval are paused before they run. End users confirm in the MCP host prompt, or configured reviewers decide in the Approvals inbox. CortexHub also supports outbound webhooks so approval requests can route through your existing tools.
CortexHub produces one audit trail and evidence you can map to SOC 2, ISO 42001, the EU AI Act, and NIST AI RMF. Records are tamper-evident and hash-chained, so an auditor can verify nothing was changed after the fact, offline from an export alone.

Start governing today

Govern your first agent in minutes.

Tell us what you want to govern and we will help you choose the right first workflow.

For the enterprise

See it govern your agents.

Book a demo for a walkthrough of runtime governance, the audit trail, and governed agent workflows. We will tailor the walkthrough to your tools, policies, and security requirements.