ClovieAI governance that runs where your data has to stay.
Install Clovie on isolated networks with offline licences and models you host, keep pilot agents away from production, and hand oversight bodies evidence they can verify.
Environment isolation
| Policy | Decision | Mode |
|---|---|---|
| Pilots off production networks | Deny | Enforce |
| Production-only models | Deny | Enforce |
| Production-only tools | Deny | Enforce |
| An owner for every agent | Deny | Enforce |
| Oversight for high-impact agents | Approval | Monitor |
| Documented models only | Deny | Enforce |
- Risk level
- High
- Model
- Hosted on site
- Requested
- 6 min ago
Public agencies have to show their work.
An inventory to publish
Agencies are asked to list their AI use cases and say which ones affect rights and safety.
Pilots next to production
Pilot agents built in weeks share networks, models and tools with systems the public relies on.
Networks with no way out
Classified and isolated networks rule out tools that need to call home or reach a vendor's cloud.
The direction agencies are working to
The rules and guidance that shape how AI is controlled in public sector, each linked to its official source.
- OMB Memorandum M-25-21US Office of Management and BudgetFederal AI use: chief AI officers, use case inventories and minimum practices for high-impact AI. (official source, opens in a new tab)
- Directive on Automated Decision-MakingTreasury Board of Canada SecretariatImpact assessments, human involvement and notice for automated decisions in federal programs. (official source, opens in a new tab)
- NIST AI Risk Management FrameworkNational Institute of Standards and TechnologyGovern, map, measure and manage: a common structure for AI risk in public and private bodies. (official source, opens in a new tab)
- NIST SP 800-53 Rev. 5National Institute of Standards and TechnologySecurity and privacy controls for federal information systems, including boundary protection. (official source, opens in a new tab)
- EU AI ActEuropean Union, Regulation (EU) 2024/1689Rules for AI systems, including high-risk uses in public services, benefits and migration. (official source, opens in a new tab)
Clovie maps its controls to these texts to help your teams; it is not legal advice, and using Clovie does not on its own make an organization compliant with any of them.
Controls for public agencies
6 controls, each a policy you install from the Policy Hub. Every one starts in monitor mode and changes nothing until you promote it after a simulation on your own traffic.
From the Policy Hub
Six policies from the environment isolation, NIST AI RMF, transparency and data privacy packs.
- Blocked
Pilots off production networks
Blocks pilot, development and test agents that call from a network zone marked as production.
Environment isolation pack - Blocked
Production models and tools
Models and MCP servers limited to production can't be used by agents from other environments.
Environment isolation pack - Blocked
An owner for every agent
Blocks agents with no owning team or no documented risk level, so the inventory stays complete.
NIST AI RMF pack · mapped to NIST AI RMF, Govern - A person approves
Oversight for high-impact agents
A person approves requests from high and critical risk agents in production before they run.
NIST AI RMF pack · mapped to NIST AI RMF, Govern - Blocked
Documented models only
Blocks production use of models that are not registered with Clovie or have no description.
Transparency pack - Blocked
Personal data out of prompts
Blocks prompts with social security, social insurance, passport or licence numbers.
Data privacy pack
How Clovie runs on an isolated network.
Built for isolated networks
Every capability on this page works on premises and air-gapped. Nothing calls home, and nothing needs a connection to Clovie.
- SaaS
- Customer VPC
- On-premises
- Air-gapped
Offline licences
Licences are checked on site, and usage reports leave the network only as signed files you carry.
Verifiable software
Load releases into your own registry and verify their signatures offline before you run them.
Models you host
Use models hosted on your network, and qualify them offline for Clovie's own AI features.
Controls mapped to the frameworks you answer to
- NIST AI RMF: NIST AI Risk Management Framework
- EU AI Act: EU Artificial Intelligence Act
- ISO/IEC 42001: ISO/IEC 42001 AI management system
- OWASP Top 10: OWASP Top 10 for LLM applications and agentic AI
Questions
Does Clovie work with no internet connection at all?
Yes. Air-gapped installs load releases from your own registry, check the licence offline and use models hosted on your network. Usage reports and evidence leave only as signed files you choose to carry out.
Can we publish our AI use case inventory from Clovie?
Clovie keeps every agent with its owner, purpose, risk level and environment, found by discovery as well as registration. Export it to build the inventory your oversight body asks for.
How do we keep pilots away from production?
Mark network zones, models and tools by environment. The environment isolation pack then blocks pilot and test agents from production networks, models and tools.
Will these policies block anything on day one?
Every policy installs in monitor mode, records what it would have done, and changes nothing until you promote it.
See Clovie on an isolated network.
We'll run the controls on your own agents in monitor mode and show what they would have held and blocked.