Platform · AI Governance
Oversee the AI systems and agents your organisation uses
Organisations adopt AI systems faster than they write policies for them. These include models in products, agents with service accounts and vendors that have added AI processing. xmodo records each one in the inventory with an owner and applies the relevant policies. It maps each one to the AI frameworks that regulators and customers cite, and records who approved each agent action.
Inventory with owners
Models, AI-enabled applications, agents and their identities are recorded in the asset register. Each has an owner, a purpose, a risk classification and a record of the data it uses. Vendors that process data with AI are flagged in third-party risk and assessed as AI vendors.
AI policies
Use AI acceptable-use, model risk and agent-permission policies from the template library. Each policy is versioned, acknowledged by the people it applies to and linked to the controls that enforce it.
AI frameworks mapped together
ISO/IEC 42001, the EU AI Act by risk class and NIST AI RMF 1.0 are set up as controls in the same library. One AI governance programme provides evidence for the certifiable standard, the regulation and the voluntary framework.
Agent actions recorded
Agents acting through xmodo, including the platform's own AI and external agents on the MCP server, can only propose changes. Each proposal shows a source and a confidence score and waits for a named approver. The activity log gives an examiner the full evidence trail.
Questionnaire answer drafted by the AI
Q: How is access to production systems reviewed?
Access to production systems is reviewed quarterly by the platform owner, with results recorded and exceptions remediated within 30 days.
The record shows what the AI suggested, who approved it and when.
Example data.
Works with
Frequently asked questions
Does xmodo monitor agents running outside the platform?
xmodo governs every action taken by agents through its MCP server or by the platform's own AI. Agents elsewhere in your organisation are recorded as AI systems with owners, policies and controls. Their evidence is collected through integrations and attestations, as for any other system.
Which AI frameworks are in the library?
The library includes ISO/IEC 42001:2023, the EU AI Act and NIST AI RMF 1.0. They are mapped to each other and to ISO 27001, so you manage your AI management system within your existing programme.