Clear rules. Approved work keeps moving.
Start by allowing and reporting. When you are ready, approve the tools your teams rely on and block other AI, for the whole company or just where it matters.
- Initial state: allow and report
- Company, site, department, or device
- Most specific rule wins
- Enforced offline from cache
Five steps from discovery to a published policy.
Walk through the wizard below. In step 3, switch blocking on to see how the published policy changes.
Review discovered AI tools
Step 1 of 5Assistants · 128 devicesReported
Coding · 34 devicesReported
Meeting tools · 52 devicesReported
Image generation · 6 devicesReported
Local AI software · 3 devicesReported
Select the tools your company uses
Step 2 of 5Choose whether to block other AI
Step 3 of 5Off: unapproved tools are allowed and reported. On: unapproved AI applications and websites are blocked for devices in scope.
Current setting: Allow and report
Apply the policy scope
Step 4 of 5All 248 devices
Manchester office · 96 devices
Choose a department
Choose a device
Review and publish
Step 5 of 5- Approved tools
- General chat assistant, Code completion plug-in, Meeting notes assistant
- Other AI tools
- Allow and report Reported
- Scope
- Site: Manchester office
- Takes effect
- At each device's next check-in
Illustrative walkthrough with sample data.
The most specific rule takes precedence.
Set a broad company rule, then refine it for a site, a department, or a single device. Change the rules below to see which one applies to the device.
The device rule is the most specific rule set for this device, so it takes precedence over broader rules.
Policy keeps working when the network does not.
The agent stores the last policy it received. If a device is disconnected, on a train, or working offline, it continues enforcing that cached policy. At its next check-in, it reports in and picks up any newer policy.
See the check-in timelineConnected
Checks in on the company schedule and receives policy updates.
OnlineDisconnected
Continues enforcing the last cached policy until it reconnects.
Cached policyPublish your first policy with confidence.
Begin with allow and report, and tighten only when you are ready.