HighSign in the order your team meets it: the lookup they use every day, the register and policy behind it, and the evidence that comes out the other end. Every screenshot below is our live demo workspace, an 18 person accounting firm called Hartley & Co.
Can I use this tool for work? Answered in seconds.
One shared link for the whole team, no logins, anonymous by design. Staff pick the kind of data, search any tool or paste a link, and the verdict settles with the exact rule cited. Unknown tools are a door, not a dead end: the request form is pre-filled and enrichment starts within a minute.
Otter.ai changed its data retention terms.
Every tool on one register. A verdict per data class.
Fourteen tools, five data classes, one matrix you can defend. Overrides are explicit and logged. AI tool intel researches a vendor’s terms with cited sources, and Vendor Watch flags the silent changes: preview exactly which verdicts flip before you confirm.
Edit with the impact in view. Publish with a hash.
Rules are plain sentences built from a fixed vocabulary, so anyone can read the policy and the system can compute it. The impact pane recomputes on every change: which verdicts flip, which requests are affected, who re-attests. The publish button lives on the impact pane, so nobody publishes blind.
The shadow lane: in the work, not in the register.
The operating map. Where AI actually sits in the work.
Governing a list of tools misses the point: AI lives inside workflows. Map each one as steps, attach the AI at every step, and watch verdicts resolve live from the register. Describe a workflow in a sentence or dictate it, and the AI mapper drafts the chain for you. The shadow lane shows the AI that is in the work but not in the register. That is the gap, made visible.
Requests, exceptions, attestations, incidents. Nobody waits in silence.
Every request has an SLA clock the approvers can see, and duplicates coalesce into demand instead of clutter. Declines must cite the rule and offer an alternative; the form will not let you say no without a path. Exceptions are loud, owned and always expiring: when the Otter exception lapses on 30 September 2026, the verdict reverts on its own and the owner is told.
Find the shadow tools without a witch hunt.
The amnesty survey is anonymous, five minutes, and it works because it is anonymous: no names are recorded anywhere and the page says so. The reveal is one plain sentence about how many tools your team really uses. Learn closes the loop with short modules and a scored knowledge check that feeds the evidence pack.
The evidence pack assembles itself.
The pack is a view of what already happened, not a build job: policy versions and diffs, the register snapshot, exceptions with owners and expiries, decisions, attestation completion, the incident log. Export it as a board-ready document stamped with the policy hash. Audit-ready every day, not the week before the audit.
policy v4 · sha256:9f31…c2ad
Reviewed · K. Hartley
You have seen the rooms. Walk in.
Set up in minutes, seeded with a working register, live verdicts the same morning. One plan, everything included, from $49 a month.