Danielle Rosenthal

Work  /  Risk and compliance · 2026

An AI assistant that works inside the user’s permissions

An enterprise AI assistant inside a compliance platform, running on each customer’s own Claude or OpenAI key rather than a shared one.

It answers questions about the screen someone is on and carries out work through the platform’s own APIs, under that person’s permissions, with every call written to an audit log.

In production on each customer’s own model keys, every tool call logged

The rest of it

Ask me

What’s in it

  1. What it does
  2. Permissions are the boundary
  3. The customer brings the key
  4. Everything is logged
  5. What’s actually hard