AI Access Control Compliance Center

Compliance checklist. Open a row for sources and how to build the control.

• Agent identity and authenticationAgent identity and authenticationUSEUISOSOC 2
• Fine-grained authorization and least privilegeFine-grained authorization and least privilegeUSEUISONISTSOC 2
• Delegation and on-behalf-of chainsDelegation and on-behalf-of chainsEUISONISTSOC 2
• Human oversight and approval of high-stakes actionsHuman oversight and approval of high-stakes actionsEU—
• Consent and bounded delegationConsent and bounded delegationEU—
• Data access controls for agent retrievalData access controls for agent retrievalUSEUSOC 2
• Logging, auditability, and traceabilityLogging, auditability, and traceabilityUSEUISOSOC 2
• Revocation and policy lifecycleRevocation and policy lifecycleUSEUISOSOC 2
• Monitoring and incident responseMonitoring and incident responseUSEUSOC 2
• Contestability of automated decisionsContestability of automated decisionsEU—
• Transparency when people interact with AITransparency when people interact with AI——
• Separation of duties and policy change controlSeparation of duties and policy change controlEUUSISOSOC 2
• Risk assessment for agentic systemsRisk assessment for agentic systems—ISONISTSOC 2