Govern AI where it acts, where it writes, and where it reads your data.
Git-layer governance for AI-generated code
Intercepts every AI-generated PR before it merges. Creates a Developer Execution Object, evaluates it against policy, and gates or blocks non-compliant code at the source — inside your existing Git workflow.
- PR gating + DEOs
- AUTO / GATE / BLOCK verdicts
- Policy-as-code (verity.yaml)
- ISO 42001 compliance
Runtime governance for AI agent actions
Sits between your AI agent's reasoning and real-world execution. Every action intercepted, evaluated against policy, and either executed, gated, or blocked — before anything touches your infrastructure.
- Policy engine + Executors
- Human-in-the-loop approval
- AWS Marketplace
- ISO 42001 compliance
PII detection and redaction for AI in Europe
Scans text for EU personally identifiable information before it enters your AI models. GDPR-aligned, jurisdiction-aware — Spain, Ireland, Germany, France, and Italy. Redacts and produces a signed audit record for every scan.
- MCP server + REST API + SDKs
- National ID detection (DNI, PPSN, Codice Fiscale…)
- GDPR Articles 5, 25 & 32 alignment
- Signed audit record per scan
Three enforcement surfaces. One provenance standard.
Every action logged with full provenance — who, what, why, when.
ISO 42001-based rules gate actions before execution — deterministically.
Human-in-the-loop approval for high-risk operations. The agent waits.
Subscribe, enter your Bedrock or OpenAI key plus ProvenanceCode API key — default policy applied, containers online.
Low ×1 · Medium ×3 · High ×10 — fair metering aligned with real risk.
Deterministic policy eval — not a second LLM. Typically under 5% token increase vs native LLM alone.
Enterprises will not adopt agents without these three things.
Auditability — every action explainable under policy and risk assessment. Risk control — high-risk work requires human approval. Accountability — signed, immutable provenance when something goes wrong.
Competitors (OpenAI Agents, Nvidia NeMo) focus on capabilities. ProvenanceCode focuses on control. That is the enterprise gap.
Join the waitlistFind what matters to you
What are you governing?
Choose the surface you need to control — we'll show you the right product and personas.
Agent OS · Runtime governance
What's your biggest challenge with AI deployment?
Select the one that resonates most.
- I can't move fast enough — I need AI velocity without losing control CEO · CTO · VP Engineering
- I don't know what my agents are actually doing — it's a black box CISO · Security Lead
- I need documented proof that we govern every AI decision we make General Counsel · CLO · Compliance
- I can't quantify our AI risk exposure or justify the cost CFO · Finance Lead
Verity · Git-layer governance
What's your biggest challenge with AI-generated code?
Select the one that resonates most.