Skip to main content
Folio
Nº 05Governance - access, authority and oversight

Governance & security

Give AI the access and authority each job needs.

Business-ready means more than a capable model. It means deciding who can see information, what AI is allowed to do and how the people responsible can supervise it.

The control model

Decide who can access information and what AI can do with it.

Workspace permissions

Organisation membership, roles and scoped permissions govern access and actions. Authorisation is enforced on the server, not just by hiding buttons.

Connected accounts

Access to a provider and access to a particular account are distinct. Configure which accounts and capabilities can be used, alongside the provider's own permissions.

AI execution policies

Configure model selection, task execution and delegation. Tool approval requirements depend on the operation and policy; managed plans support approval before execution.

Oversight in the workflow

Keep track of running work and the people responsible for it.

Task run history supports review of execution. Managed work can be paused, resumed or cancelled. Access-management events and external-sharing activity provide additional visibility.

Agree review points, exception handling and accountability for each workflow. The right level of autonomy depends on the work and its consequences.

Product example: permissions and approval settings.

Information handling

Make the data conversation explicit.

Credentials and files
Connected-app credentials are encrypted. File access can use time-limited signed URLs. These mechanisms support controlled access; they do not replace a clear data-handling policy.
External sharing
Sharing controls include expiry, revocation and access records. Review the type of link and its lifetime before sharing sensitive material.
AI processing
AI features process information server-side and may use model and infrastructure providers. Data paths depend on the feature and configuration.
Deployment review
Assess the intended data, provider arrangements, retention requirements and contractual terms with your technology and security teams before rollout.
Discuss your security and procurement requirements

Put Folio to work

Bring a workflow to life and get benefits now.

Use Folio to take on a recurring job, reduce the effort around it and measure the difference. We will help you choose where to start.