Governed by design
Every agent run passes through a governance gate before any tool fires. Scoped identities, spend caps, lifecycle checks, and a full audit stream are on by default — not bolted on.
Your data, your rails
Refusion connects to your data sources through scoped, revocable connectors. The semantic context layer exposes only the assets you register; raw tables are never addressed directly by agents.
PII handling
A deterministic PII classifier runs on every prompt and result. Sensitive values are redacted before model routing when a policy rule demands it. Redactions are counted and logged in the audit stream.
Retention & erasure
Policy rules can tag audit events with a retention window, after which a scheduled job purges them. Data subjects can be erased on request via the compliance console — an irreversible right-to-erasure.
Access & roles
Admins manage connections, policy rules, and erasure. Regular users operate within the policies set for them. Plan tiers gate the governance features available to each account.
Questions about your data?
Reach the team that built the governance layer.