Know who can access what, and why.
Shield is AI access governance we're building for regulated teams: a plain-language map of who can reach what, risky grants flagged with the reasoning behind them, and no change made without a person's sign-off.
You're on the list ✓
We'll reach out as Shield takes shape.
- ci-deploy-botrole · full adminOver-broad Why: used 3 of 1,400 granted actions in 90 days. Suggest a scoped role.
- A. Raoprod database · read/writeStale Why: last used 118 days ago; moved to the data team in June.
- finance-analystsledger exports · readMatches policy
Access reviews are rubber stamps.
Auditors know it.
Permissions pile up faster than anyone can review them. The quarterly review becomes a spreadsheet people approve without reading, and when the auditor asks why someone still has production access, the honest answer is "nobody remembers." That's also the wall that stops AI projects from touching real data.
Granted for a deadline
Someone needs prod access "just for this release".
The deadline passes
The access doesn't. Nobody owns removing it.
2,000 rows in a sheet
Review time arrives as a spreadsheet no one can reason about.
Approve all
Risk stays, evidence is thin, and it repeats next quarter.
Same rule as PATH:
AI explains, people decide.
Shield comes from the same FDE practice and the same instinct: make the safe path the easy one, and keep a human on every decision that matters.
A map people can read
Who can reach what, written in sentences that a compliance lead can sign off on, not a dump of policy JSON.
Every flag shows its reasoning
Unused, stale, over-broad or out of policy: Shield says which, and shows the evidence behind it.
Nothing changes on its own
Shield proposes the narrower grant; a person approves it; the change is recorded with their name on it.
Evidence by default
Every review produces the artefact your auditor asks for, instead of a screenshot hunt the week before.
Become a Shield design partner.
Tell us where access governance hurts today. Design partners get early builds and a direct line to the people writing the code.
Request received ✓
We'll reach out to set up a short call.