COMMAND CENTER · POLICY ENGINE

Policy, on autopilot.

You approve policy. Awasi runs the night shift. Set a dial per team: Careful, Balanced, or Trusting. Awasi writes the rules, keeps them current as your stack changes, and turns every decision you make into a standing rule.

Get protected todaySee pricing
part of the platform · $15k a year flat
ONE DIAL PER TEAM

Your whole posture, as living policy.

The dials set how much freedom each team gets. The rules below do the actual work, and Awasi keeps them in sync. Move a dial, tap apply, and the managed rules rewrite themselves.

Policies
The dials set how much freedom each team gets. The rules below do the actual work — Awasi keeps them in sync.
● managed by awasi
POSTURE · THE SIMPLE VIEWmoving a dial rewrites the managed rules below
Engineering
22 people · 4 agents · 9 apps
Ship freely. Writes to production and off-hours changes pause; everything else flows.
Go-to-market
18 people · 2 agents · 3 apps
Agents draft and research freely. Anything leaving the company pauses for a look.
Leadership
6 people · 1 agent
Reading and summarizing is free. Anything sent as an exec gets a check.
Contractors
12 people · external
Read-only on assigned projects. Every write pauses. Access expires with the contract.
Steady for 12 days · approval friction down 40% · zero incidents.
SUGGESTED RULE · BASED ON YOUR DECISIONS
Stop Support Triage from exporting contacts — you’ve said no 4 times this week
deny · server:hubspot · tool:export_contacts · agent:support-triage · priority 12
IDRULE · FIRST MATCH BY PRIORITY WINSSET BYPRIO24H HITS
P-001Secrets never leave
deny · args match credential shapes → any external tool
platform · always10
P-006Off-hours writes freeze
require_approval · tool:*.write · outside 08–20 local
posture · engineering61 held
P-009Unmanaged device guardrail
require_approval · device:{managed:false} · tool:*.write
posture · all teams90
P-014External send needs a human
require_approval · tool:gmail.send · args.to not @helio.com
posture · gtm + eng141 held
P-016Contractors read-only
require_approval · group:contractors · tool:*.write
posture · contractors163 held
P-019Block contact export
deny · server:hubspot · tool:export_contacts · agent:support-triage
custom · you121 denied
P-002Default allow + log
allow · * · full event to the graph
platform · always9991,411
Rules tagged posture are written and tuned by Awasi from the dials above. platform rules never move. custom rules are yours — dials never touch them.
THE HANDBOOK

Policy your team actually reads.

Every rule compiles into a plain-English handbook called “How we use AI at Helio”, rendered per team and regenerated whenever a dial moves. Awasi DMs it to every new joiner on day one, and reading it is logged as SOC 2 training evidence.

HOW IT ARRIVES · DAY 1, IN SLACK
Helio Systems — Slack
AAwasiAPPSigned in as Lena Fischer · Design · day 1
A
AwasiAPP9:02 AM
Welcome to Helio, Lena 👋 One thing before you dive in: how we use AI here. Five short sections — it's the live policy for your team, not a PDF. Takes about four minutes.
POLICY HANDBOOK · DESIGN EDITIONv2.4 · from 19 live rules
Just go
I’ll pause and ask
Never
How we like to work
?When in doubt, ask
0 of 5
Open full handbook ↗Remind me after lunch
Message Awasi — or ask about any rule/awasi ask
Rippling adds someone, Awasi delivers their team's edition · tick the sections and watch the read receipt become training evidence
THE FULL HANDBOOK · PER TEAM
HELIO SYSTEMS · POLICY HANDBOOK
generated from 19 live rules · updated 12s ago
How we use AI here.
Engineering runs at Balanced. You ship freely; a couple of sensitive moments get a 30-second human check.
0 of 5 sections read
Just go — no need to ask
Everyday AI use is pre-approved. Awasi watches quietly and logs everything, so nobody has to.
Use Claude, ChatGPT, Cursor — anything — through your Helio accountdefault allow
Let agents read internal docs, tickets, and the analytics databaseP-002
Build and ship internal tools — connect them through the gatewayP-002
Awasi will pause and ask someone
These aren’t forbidden — they just get a 30-second human check first. You’ll see a Slack ping; nothing breaks or gets lost.
An agent sending email or messages outside the companyP-014
Exporting customer lists or bulk contact dataP-019
Agents writing to production outside working hoursP-006
A new app asking to touch real customer databroker
Never — blocked automatically
You can’t do these by accident. Awasi stops them before they happen, every time.
Secrets, keys, or passwords leaving in any prompt or messageP-001
Company data flowing to personal accountsP-011
Apps holding permanent, unscoped keys to customer databroker
How we like to work with AI
Not enforced by the gateway — these are the norms we hold each other to. They matter as much as the rules.
AI drafts, you decide — anything with your name on it gets your eyes before it shipsnorm
Say when it’s AI — mark agent-written docs and messages so nobody guessesnorm
Share what works — good prompts and agents go in #command-center, not private stashesnorm
No AI in people decisions — hiring, reviews, and feedback stay humannorm
?When in doubt, just ask
Type /awasi ask in Slack — "can my agent read the customer table?" — and get an answer from the live rules in seconds. Asking is never the wrong move.
Every answer comes from the same engine that enforces the rulesask
If a rule feels wrong, say so — rules here change in minutes, not quarterssuggest
Mark all five sections read to acknowledge. Your acknowledgment is logged as training evidence — no separate compliance course.v2.4 · Engineering edition
scrolls · switch teams inside
DECIDING, NOT CONFIGURING

When a rule needs a human, it's one tap.

Sensitive calls freeze mid-flight and wait in the approvals queue. Approve once, deny, or make it a standing rule. Every decision lands in the audit trail.

AwasiHELIO
Home
ACT
Overview
Approvals2
Findings3
Policies1
SOC 2 prep68%
INVENTORY
People58
Agents6
Apps14
EXPLORE
Graph
Events
ON WATCH · EVERY CALL CHECKED
PN
Priya Nair
CTO · admin
Approvals
⌘K
last event 12s ago
Approvals
When something sensitive is about to happen, Awasi pauses it and asks. Nothing moves until you decide.
WAITING ON YOU · PAUSED SAFELY UNTIL YOU DECIDE
Pipeline Researcher wants to send an email outside Helio
whatsend an emailtokai@vendorco.com — outside the companyastessa@helio.comsubject"Q3 pipeline summary"whyyour rule: outside emails need a person’s OK · paused 4m
Approve onceDenyAlways ask
Invoice Reconciler is asking to read Stripe data
seescharge amounts and payment statushiddencustomer emails — masked before the app sees themlimitsread-only · expires on its own in 30 daysidentityverified ✓ the app is what it says it is
ApproveDeny
RESOLVED · LAST 7 DAYS
Monpipeline-researcher → gmail.send · investor updatepriyaapproved
Frieng-oncall-triage → github.issue.create · 03:14marcusapproved
Thusupport-triage → hubspot.export_contactspriyadenied
Thubroker · metrics-tv renewaltimeoutdenied
EVIDENCE, WITHOUT THE SPRINT · COMING SOON

SOC 2, collected while Awasi works.

Every decision, grant, and revocation is already an audit trail, mapped to controls. The prep view shows exactly where you stand and what Awasi already did for you.

SOC 2 prep
COMING SOON
Type I · audit window opens Sep 15 · 67 days
68%
26 of 38 controls audit-readyahead of 80% of startups at this stage
▲ 6-day streak212 evidence items auto-collected
YOUR PATH
Access control10 of 10 · complete
Infrastructure security7 of 7 · complete
67%Change management4 of 6 · in progress
Vendor management2 of 6 · up next
·Incident response0 of 5
·People & training3 of 4
CURRENT UNIT · CHANGE MANAGEMENT2 tasks left · ~12 min
Deploy approvals enforced at the gatewayawasi · evidence auto-collected
Branch protection on main + required CI checksawasi · evidence auto-collected
Quarterly access review · repo adminsawasi · evidence auto-collected
Every production change logged with approverawasi · audit trail is automatic
Document the rollback procedureyou · ~10 min · +3%
Accept the deploy-bot guardrail policyyou · one click · +3%
AWASI DID THIS FOR YOU · THIS WEEK
212
evidence items collected from live enforcement
19
controls continuously monitored, not screenshotted
1
vendor list drafted from the graph — review when ready
Most tools ask you to gather evidence. Awasi already has it — the audit trail is a byproduct of enforcement.
WHAT IT RUNS ON
Every rule here reads the live stream, the graph, and the gateway. Policy is only as good as the data underneath.
See the Data platform
Go build your thing.
Awasi has it covered.
Start freeDemo Awasi first
sign in with your work email · approved by a human, usually same day