Security & Governance

How TotalApp keeps AI under control — the rules your organization decides, and the technical protections that enforce them.

Overview

Governance is the set of rules your organization decides: which data the AI can work with, which topics are off limits, whether personal data is masked, and what is recorded. AI Security is the other half — the technical protections underneath (transport, sessions, prompt hardening, tenant isolation). AI Governance & Access is about the rules; AI Security is about how they are enforced and protected.

Two halves of one picture

Governance answers “what is the AI allowed to do?” Security answers “how is that made to hold?” Read them together, but each page stays on its own half so nothing is repeated.

Topic	Where it is described
Permissions, topic restrictions, PII masking, audit trail and export	AI Governance & Access
Data path, transport and session security, prompt hardening, egress control, file handling, tenant isolation	AI Security
Chaining agents into pipelines	AI Orchestration
Deterministic data first, AI reasoning second	2-Tier Architecture

Pages in this section

AI Governance & Access

Access, topic rules, PII masking and audit.

AI Security

Prompt protection, file handling and isolation.

AI Orchestration

Building and running agent pipelines.

2-Tier Architecture

Deterministic data first, AI reasoning second.

Frequently Asked Questions

Which page should I read first?

Start with AI Governance & Access if you decide the rules for your organization, and with AI Security if you want to understand how requests and files are protected.

Who can change the governance rules?

Only tenant administrators, in Settings → Agentic → AI Governance policy. Other users cannot view or change the policy.

Are the governance controls on by default?

No. Every governance control starts switched off, so enabling AI never changes behaviour until an administrator decides it should.