How It Works

How AI agent governance works at the point of action.

CortexHub is the governance, control, and security layer for AI agents. Every agent, external or hosted, connects through one governed gateway where policy is enforced at runtime, before any tool runs. Here is how you bring agents under one policy and one audit trail.

The control plane

Connect every agent. Enforce one policy. Prove it.

Govern the AI tools your teams already use, deploy a governed Co-worker, and ground both in your company knowledge, all on the same policy and audit trail.

01

Govern the agents you have

Claude, Cursor, ChatGPT, and custom agents connect through the CortexHub gateway. Policy is enforced at runtime on every tool call: approvals, redaction, least privilege, block-by-default.

Runtime enforcement · No rip-and-replace
02

Deploy a governed Co-worker

When you want AI your workforce can trust, deploy governed Co-workers with a Brain that learns the business, under the same policy from day one.

Governed by construction
03

Ground Co-workers in company knowledge

Built-in search across handbooks, policies, and organization files, plus each member's own files and a learning Brain. It is the Co-worker's own knowledge, private to the member it works for.

Upload once · every Co-worker
The Brain

One map you can see, explore, and correct.

A governed Co-worker is only trustworthy if you can see what it knows. The Brain is one living map of the people, projects, conversations, documents, preferences, and lessons it learns. It keeps one canonical record of each person and project, remembers what matters, and corrects itself when things change. Governed by the same policy as every other agent.

01

See what it knows

Explore one map by People, Projects, Conversations, or a graph view. Nothing hidden, so what it does is accountable.

02

Correct what is wrong

Pin what matters, retract what is wrong, and merge duplicates. Each correction becomes lasting, governed knowledge.

03

Governed by construction

Every read and write runs through the same policy and audit as any other agent. Deployed to teams under central policy.

Sarah ChenProject AtlasQ4 renewalsEnterprise rolloutSecurity reviewCheck invoicesMarcus Lee
PeopleProjectsConversationsLessons
Meetings

A Co-worker that shows up and speaks up.

Your governed Co-worker does not just take notes. It joins the call already knowing your people, projects, and decisions from the Brain, speaks in its own voice, answers questions, and contributes. When the meeting ends, what was decided flows back into the Brain, governed by the same policy as everything else.

An active participant, not a silent notetaker. It participates and remembers. It does not replace the people in the room.

01 · Prepared

Walks in already knowing.

Before the call, the Co-worker draws on the Brain: your people, projects, past conversations, and the decisions that led here. It arrives with context, not a blank page.

02 · Present

Joins the call and contributes.

It is in the room. It speaks in its own voice, answers questions, surfaces the relevant history, and keeps the conversation moving. An active participant, not a passive recorder.

03 · Permanent

Every decision flows back.

Decisions, action items, and follow-ups land in the Brain, under the same policy and the same audit trail. Every meeting makes the Brain richer for the next one.

Alex's Co-worker · MeetingLive
ChatMeetingBrain
4 participants · Co-worker active
Sarah Chen
Account lead
Marcus Lee
Engineering
Priya Rao
Finance
Speaking
Alex's Co-worker
CortexHub · governed
Alex's Co-worker

“Picking up the renewal thread: last quarter we paused Project Atlas on the security review. That sign-off cleared Tuesday, so we can commit the rollout date today.”

Built-in knowledge

Ground every Co-worker in your company, not just the public internet.

Every Co-worker comes with a built-in knowledge layer: your shared organization files, each member's own files, and a Brain that learns. It is the Co-worker's own knowledge, reached only by the member it works for, with no separate search product to bolt on.

Hosted Co-workers

Chat, Brain, files, and organization search in one assistant

External MCP agents

Claude, Cursor, ChatGPT, and partner SDKs stay governed at the gateway and never reach your files

01

Organization files

Admins upload once. Every member's Co-worker searches the same shared company library, scoped to what that member is allowed to see.

HR handbooks, compliance PDFs, product specs, internal runbooks

02

Your own files

Each member keeps their own uploads and the files their Co-worker saved for them, private to that member and never mixed into anyone else's context.

Deal briefs, meeting notes, exports your Co-worker saved for you

03

CortexHub Brain

One living map of people, projects, conversations, documents, preferences, and lessons that you can see, explore, and correct. It carries the facts that matter into every session.

Preferences, client context, corrections that become lasting knowledge

org-files

Organization files

Search handbooks, policies, product docs, and finance files shared across your organization.

"What does our parental leave policy say?"

my-files

Your files

Each member's own uploads and the documents their Co-worker saves for them: invoices, briefs, working files.

"Find line items on last month's vendor invoice."

brain

Co-worker Brain

Standing facts and preferences the Co-worker learns over time, held in one Brain.

"Remember I prefer async updates on Fridays."

Stays current when you do

Update a handbook or upload a new policy and re-index from Organization Files. The next question to a Co-worker pulls the latest passages, always scoped to your organization.

  • Upload PDFs, Office docs, and images with layout-aware parsing
  • Hybrid search finds exact terms and conceptual matches
  • Strict organization isolation: no cross-organization leakage
  • Every search and save is scoped to the member and audited
Prove it

One audit trail. Mapped to the frameworks.

The controls security and compliance teams expect, with evidence auditors accept, without slowing down the people who do the work.

You set the policy

Decide what each team can reach. Risky actions wait for approval. Destructive operations stay off limits. Block-by-default is the fallback.

Credentials stay protected

Your people and agents never hold vendor secrets. Connections are managed centrally in a secure vault, and never reach the model.

Evidence, not a promise

Every action is hash-chained and attributable. Records map to SOC 2, ISO 42001, EU AI Act, and NIST AI RMF, and verify offline.

Ready to govern every agent?

Book a demo to see it govern your agents and bring your tools under one policy.