Enterprise AI Governance Platform

Your organisation is using AI.
All of it. Ungoverned.

Through APIs, browser sessions, IDE agents, and MCP pipelines — your employees are sending source code, patient data, and CUI to AI models every day. Cortega governs every surface: every request scanned, every action attributed to a human identity, every decision written to a tamper-evident audit log.

Request a demo →
API · Browser · MCP · Agentic — all governed
Runs in your cloud. Your boundary. Your data.
FISMA / CMMC 2.0 Level 2
AWS GovCloud · Azure Gov · GCP Assured · On-prem
FedRAMP Moderate ready
The problem

Your existing stack has a blind spot
the size of your AI spend.

0

Governance on AI usage by default

APIs, browser sessions, IDE agents, MCP tool calls — all reach AI models directly. No guardrail, no attribution, no audit. PHI in the prompt, secrets in the context, CUI in the output — your existing tools never see any of it.

?

Who is actually spending your AI budget

API keys tell you which team. They don't tell you which engineer, which project, or which prompt caused a $40,000 monthly overage. Without per-user attribution, budget enforcement is guesswork.

Shadow AI grows with every new model

New models, new browser tools, new agentic frameworks — every one bypasses governance until you govern it. Cortega covers every surface your employees use to reach AI. One policy surface. Zero bypass.

Platform

Three surfaces. One governance layer.
Zero blind spots.

API calls, browser sessions, and autonomous agents — governed by a single control plane with one identity model, one audit log, and one policy surface.

Surface 01

LLM API
Governance

Every call to every model passes through Cortega before a token reaches the provider. Guardrails scan the request and buffer-release the response. Fail-closed: a scan error blocks the request, not bypasses it.

Surface 02

Browser AI
Governance

ChatGPT.com. Claude.ai. Copilot. Governed via a force-installed enterprise plugin that rewrites requests through your gateway before the browser opens a TLS connection. No SSL inspection. No MITM. No certificate distribution.

Surface 03

Agentic MCP
Governance

Claude Code sessions. IDE agents. MCP tool calls that query databases and execute shell commands across dozens of turns. Cortega intercepts tool calls before the client acts and scans tool results before they reach the model. Nobody else governs this.

Capability 01

Least-Cost
Routing

Every request is classified for complexity before it reaches a provider. Simple → cheapest capable model. Complex → escalate. The Cost Intelligence dashboard shows actual spend vs. what you would have paid at full frontier-model prices — and the delta.

Capability 02

Identity and
Attribution

Every request — API, browser, agentic — attributed to a uniquely identified human via OIDC and locked personal keys. User identity is cryptographically bound to the key, not a spoofable header. MFA enforced at your enterprise IdP. Instant revocation propagated across all replicas.

Capability 03

Org
Intelligence

An interactive AI usage map shows every team, user, model, and project and how they connect. Ask it a question in plain English. Get an answer from your own governance log — not a vendor dashboard that sees only what you export to it.

Use cases

Built for industries where
getting AI wrong isn't an option.

Cortega ships with guardrail rule domains and compliance controls tuned for regulated enterprise from day one — not retrofitted after the fact.

Healthcare

PHI stays where it belongs.

Cortega's healthcare guardrail domain detects patient names, diagnoses, medications, and clinical notes in every request — before the prompt leaves your network. The same scan runs on the model's response. The NER detector adds ML-backed person and address detection on top of the deterministic layer.

18
PHI categories
Fail-closed
Scan guarantee
BAA
Path available
Government / Defense

CMMC 2.0. Enforced, not aspirational.

CUI markers, contract numbers, and government-domain keywords blocked at the guardrail layer on every request. Hash-chained tamper-evident audit log satisfies AU control requirements. FedRAMP Moderate documentation ready. FIPS 140-2 cryptography throughout. Air-gap deployable as a single binary.

FedRAMP
Moderate ready
CMMC 2.0
Level 2
FIPS
140-2 throughout
Engineering

An agent left running overnight shouldn't cost $4,000.

Engineers run Claude Code sessions, IDE agents, and MCP pipelines that loop for hours — using frontier models for tasks a cheaper model handles fine. Cortega enforces per-engineer budgets with hard pre-flight stops, routes simple requests to the lowest-cost capable model automatically, and alerts before a runaway agent exhausts a monthly quota. It also catches API keys, credentials, and proprietary code leaving the org in prompts — before they reach any model.

Hard stop
Budget per engineer
Auto
Least-cost routing
MCP
Agent sessions governed
Finance

Every analyst query attributed and audited.

Know which analyst asked which question about which deal. Enforce per-user AI budgets so a single agent run can't blow a monthly quota. Block M&A terms and insider information patterns from reaching external models. The audit log is board-ready evidence — hash-chain verified and exportable.

Per-user
Budget cap
Hard stop
Pre-flight check
Hash-chain
Tamper-evident
Compliance

Your data never leaves
your authorization boundary.

Cortega is not a SaaS tool. It deploys inside your authorization boundary — AWS GovCloud, Azure Government, GCP Assured Workloads, or on-premises. Every AI query, every governance decision, every audit record stays inside your boundary. That is why it satisfies FISMA and CMMC.

Why boundary matters

A SaaS AI proxy takes your employees' queries — potentially containing CUI, PHI, or source code — and routes them through a vendor's infrastructure outside your authorization boundary. That is a CUI disclosure event under CMMC and a FISMA violation for federal systems.

Cortega runs in your cloud. Every query, every guardrail decision, every audit record stays inside your boundary. Your 3PAO and DoD assessor see a proxy you control, not a SaaS dependency you trust.

Cloud agnostic

Cortega runs wherever your organisation runs — AWS GovCloud, Azure Government, GCP Assured Workloads, or on-premises. No cloud lock-in. No dependency on Cortega's infrastructure. Your team owns the deployment, the data, and the controls.

FISMA / FedRAMP Moderate
  • TLS 1.2+ on all communication (FIPS SC-8)
  • FIPS 140-2 validated KMS for secrets (SC-12)
  • AES-256 encryption at rest (SC-28)
  • MFA for admin access (IA-3, IA-5)
  • Hash-chained tamper-evident audit log (AU controls)
  • No raw query body storage — metadata only
  • SSP-ready architecture documentation
CMMC 2.0 Level 2
  • CUI guardrail domain — blocks CUI in AI prompts
  • RBAC with viewer / auditor / admin roles (AC controls)
  • Per-user identity — every request attributed (IA controls)
  • Audit log covering all 800-171 AU event types
  • Guardrail verdict before any egress (no CUI leak)
  • Deployer controls the boundary — no SaaS dependency
  • NIST SP 800-171 Rev 2 control mapping available
HIPAA
  • 18-category PHI guardrail domain on every request
  • Response scan — PHI blocked before reaching client
  • No PHI stored — metadata and redacted labels only
  • Encryption at rest and in transit
  • BAA path available
  • Audit log with configurable retention periods
  • Minimum necessary enforcement at the guardrail layer
Deploys inside your authorization boundary

AWS GovCloud · Azure Government · GCP Assured Workloads · On-premises air-gap. Cloud-agnostic Terraform and Helm IaC — no CloudFormation, no ARM templates. Secrets injected via your cloud-native KMS (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, or HashiCorp Vault). Bring your own certificates or let the installer provision TLS automatically.

Why Cortega

No one else governs all three surfaces.
We do.

Capability Cortega CalypsoAI CASB / Zscaler API gateway Lakera
Wire-compatible LLM proxy — zero SDK changes OpenAI + Anthropic Partial OpenAI only
Deterministic guardrail scan — fail-closed Healthcare, govt, injection Partial
Response scan — buffer-then-release on streams Full Partial
Per-user attribution — not just API key User / team / dept / project Team level
Shadow AI detection and classification 4 shadow AI types
Tamper-evident hash-chained audit log Full — chain-verifiable
Org intelligence — NL queries over governance log Full
Agentic / MCP tool call governance First to ship
FedRAMP Moderate / CMMC 2.0 ready Full Federal focus Some
On-premises, single-binary deployment One binary, no dependencies Limited SaaS only Partial

Put governance on the
critical path. Not next to it.

Point your SDK at Cortega. See your first governed request in under 30 minutes.

Request a demo →