# Matimo Governance

Governance is an Enterprise add-on for Workbench. It wraps the agents you
already have. Your agents are not rewritten: the controls run in the execution
layer, not in the agent.

## What it does

- **Shadow Mode first.** Every policy is evaluated on every run, but nothing is
  blocked. You see what each rule would have blocked, then switch to enforcement
  when you are ready.
- **Emergency Stop.** One control in the admin dashboard blocks all agent
  executions across the workspace until an admin clears it. No deployment
  needed.
- **Agent identity.** Each agent gets a cryptographic identity, so an auditor
  can see which agent did what and when. Revoking an agent takes effect
  immediately.
- **Policy engine.** 16 built-in templates (for example, block outside business
  hours, or require approval for financial data), custom policies, simulation
  against past runs, and conflict detection before you publish.
- **Agent Soul documents.** A versioned record of each agent's purpose and
  behavioral contract. Changes to the contract need human approval.
- **Content inspection.** Flags personal data, exposed secrets and
  prompt-injection attempts in agent traffic.
- **Governance health score.** A single 0 to 100 score showing how well your
  agents are covered.
- **Compliance evidence.** One-click export for SOC 2, HIPAA, GDPR, EU AI Act,
  ISO 27001 and NIST AI RMF, with per-control detail and a section for what the
  system cannot verify.
- **SIEM streaming.** Governance events stream to Splunk, Datadog, Elastic or
  any webhook-capable tool.

## Status notes

- Single sign-on: SAML 2.0 is verified end to end against a live provider. OIDC
  and LDAP sign-in are built but have not yet been verified against a live
  provider or directory.
- Automatic user provisioning (SCIM) endpoints exist; end-to-end verification is
  pending.

## What it does not do

- It does not certify you. The export is evidence for your own auditor.

## Who it is for

Security, compliance and engineering leaders who need to show how agents are
controlled.

## Next step

Governance is part of the Enterprise plan. [Contact us](/contact) or write to
info@roaiq.com.