Skip to main content
Connic

Document AI governance.
Right in Connic.

Connic brings preliminary assessments, measures, and evidence together in a record for each AI system. Linked agents, deployments, and environments connect the documentation to ongoing operations. Evidence exports contain metadata only.

Talk to SalesReview the readiness walkthrough
Read the governance docs
Preliminary assessment
version 3approved

Pinned catalog · reviewer rationale retained

Evidence snapshot
SHA-256 6f29c3...f62a

Immutable · metadata only

  • Human oversightconfigured
  • Disclosure verificationneeds evidence
  • Incident proceduregap
Preliminary readiness record, not a legal determination or certification.

Register AI systems and document their implementation

Create an AI system within the project and link its agents, deployments, and environments. Assessments and evidence can then be maintained for the entire use case.

  1. Register

    Describe the use case, owner, geographies, affected persons, and implementation links.

  2. Assess

    Record an immutable, versioned answer set against a pinned catalog version.

  3. Review

    Approve with rationale, a supported provider or deployer role, and uncertainty acknowledged.

  4. Operate

    Work generated controls, transparency records, monitoring plans, and incidents.

  5. Export

    Capture a metadata-only snapshot and stream its hash-verifiable archive.

Turn assessments into concrete measures

Connic derives measures from the latest approved assessment. Each measure retains the relevant article, rationale, and implementation responsibility. Implementation progress, evidence, and changes can be tracked separately.

  • Applicable control recorded without an implementation.

    gap

  • The control is marked as needing supporting evidence; evidence status is tracked separately.

    needs_evidence

  • Implementation recorded; evidence links are tracked separately.

    configured

  • Exception recorded with its required rationale.

    not_applicable
Explicit ownership

Connic · Customer · Shared · External

Refreshing re-derives controls from the current latest approved assessment while preserving prior changes.

Document transparency and implement it in the application

Connic records the AI notices and labels the organization reports implementing, along with supporting evidence. The application displays those notices and labels the content.

Connic records
  • Disclosure copy, locales, placement, frequency, and display mode
  • Customer implementation and upstream-provider evidence
  • Attested applications and supporting verification
The application delivers
  • User-facing disclosures and synthetic-content marking
  • Any prompt, response, stream, or connector-traffic modification
  • Prefixes, banners, metadata, or media watermarks

AI Governance supports documentation and evidence workflows. It does not provide legal advice, make legal determinations, issue certifications, or replace professional counsel.

Preserve and export governance evidence

Connic preserves the documented state of selected AI systems and environments as an immutable snapshot, optionally scoped to a time period. Exports contain metadata only. Checksums make subsequent changes to exported files detectable.

manifest.json · excerpt
{
  "snapshot_id": "8f2d3e43-90ab-4f7b-a218-687719b0c6e3",
  "content_sha256": "6f29c3e8a1095cbd1bd9f645cb7b355b16837e97b1dbca38344752103fddf62a",
  "scope": {
    "system_id": "5403e168-b9fd-4e42-8556-8a68d97d899c",
    "environment_ids": ["1cb302be-64d7-4c08-9d25-337a6897cb82"],
    "telemetry_scope": {
      "runs": "system_agent_environment_pairs",
      "approvals": "system_agent_environment_pairs",
      "judges": "system_agent_environment_pairs"
    },
    "time_from": "2026-07-01T00:00:00Z",
    "time_to": "2026-07-31T23:59:59Z",
    "metadata_only": true
  },
  "record_counts": {
    "systems": 1,
    "assessments": 1,
    "controls": 3,
    "transparency_policies": 1,
    "transparency_applications": 1,
    "monitoring_plans": 1,
    "incidents": 0
  },
  "telemetry_file": "telemetry-summary.json",
  "raw_prompt_or_output_content_included": false
}

  • Immutable

    Snapshots cannot be edited or deleted and persist for the project lifetime.

  • Content-addressed

    The canonical payload and every data or report artifact listed in the manifest carry SHA-256 hashes.

  • Portable

    The ZIP includes a human report, canonical JSON, collection CSV and JSON, and a manifest.

  • Scope-aware

    Coverage records selected environments, time range, retention, and missing evidence.

  • Privacy-bounded

    Summary telemetry is included without copying raw prompt or output content into the archive.

Hashes detect changed content. They are not signatures, do not establish who published an archive, and do not certify legal sufficiency. Review the evidence and governance boundaries.

Keep exploring

Approvals

Preserve human decisions around sensitive actions.

Observability

Attach operating telemetry to the governed system.

Judges

Carry evaluation evidence into the record.

Guardrails

Enforce documented runtime boundaries.

Environments

Scope systems and exports to real environments.

REST API

Automate the complete governance workflow.

Frequently Asked Questions

No. Approval preserves a reviewed preliminary assessment and its rationale. It is not a legal determination or certification. Final classification, reporting deadlines, and legal sufficiency remain the organization's responsibility in consultation with legal counsel.

It is a project-scoped governance record for a use case, independent of any one agent. It can link the environments, deployments, and agents that implement the system so telemetry, transparency evidence, and incidents attach to the right scope.

Controls are generated from the latest approved assessment. Each control retains its governing article, applicability rationale, implementation owner, implementation and evidence statuses, linked product evidence, and change history. A not-applicable status requires an exception rationale.

No. Connic records disclosure policies, attestations, and supporting evidence. It does not modify prompts, responses, streams, or connector traffic; inject banners or metadata; or watermark media. The deploying organization implements and delivers those disclosures in its application.

No. Snapshots are metadata-only and exclude raw prompts and model outputs. They include structured governance records plus scoped run, approval, and judge telemetry, along with coverage metadata for unavailable or missing evidence.

AI Governance is an Enterprise entitlement. Access is divided across compliance.view, compliance.manage, compliance.export, and compliance.incidents.manage project permissions. The same workflow is available through project-scoped REST routes under /v1/projects/{project_id}/compliance.