Monitoring and improvement
Metrics, conversation review, AI analysis, reports, live takeover by an agent and a multichannel ticket center.
Security and governance
Assistants under control, from sign-in to archiving
Roles, SSO including FranceConnect+, white-label organizations, GDPR retention, audit log, content validation and migration between environments.
| Capability | Admin | Owner | Editor | Tester | Viewer |
|---|---|---|---|---|---|
| Manage users | ✓allowed | —not allowed | —not allowed | —not allowed | —not allowed |
| Configure assistants | ✓allowed | ✓allowed | ✓allowed | —not allowed | —not allowed |
| Manage corpora | ✓allowed | ✓allowed | ✓allowed | —not allowed | —not allowed |
| Keys, credentials, MCP | ✓allowed | ✓allowed | —not allowed | —not allowed | —not allowed |
| View monitoring | ✓allowed | ✓allowed | ✓allowed | ✓allowed | —not allowed |
| Test assistants | ✓allowed | ✓allowed | ✓allowed | ✓allowed | ✓allowed |
The problem
Why it matters
Rolling out AI across an organization raises governance questions: who configures, who monitors, how long conversations are kept, how to prove what was done.
IT departments and data protection officers need concrete answers, not promises.
In practice
- IdentifyLocal accounts or single sign-on (SSO), with configurable automatic account creation.
- AuthorizeSix roles, from administrator to chat user, enforced on the server side.
- IsolateOrganizations with their own members, assistants and visual identity.
- Retain and traceRetention policies, legal hold, call log, technical alerts.
Capabilities
What you can do
Each capability is shown with its actual availability.
- Roles: administrator, owner, editor, tester, support, viewerAvailable
- Accounts, email verification, password resetAvailable
- Google SSO and OpenID Connect (Keycloak, Azure AD…)Requires setup
- FranceConnect+ (eIDAS substantial or high)Authorization to be obtained from DINUM, the French government’s digital agency.Requires setup
- Organizations and white labelingLogo, colors, font, with WCAG contrast checking.Available
- Conversation retentionArchiving, anonymization or deletion after inactivity; dry run; legal hold.Available
- API call audit log and technical alertsAvailable
- Content validation before indexingPolicy per knowledge base, quarantine, traceable human decision.Requires setup
- Migration between instancesExport/import with dry run, report and rollback within 30 days; secrets are never exported.Available
- Crisis modePriority message added to responses, per organization or globally.Available
- OpenTelemetry, Prometheus and Grafana observabilityRequires setup
Benefits
What you gain
The right access for everyone
Configuration, testing, monitoring and support are separate responsibilities.
Demonstrable compliance
Retention periods applied and traceable, with legal hold when needed.
Controlled environments
Promotion from staging to production through reversible migration packages.
Requirements and limitations
Related features
Knowledge bases
Import your files, index websites, transcribe audio and video, and screen every document before it feeds into answers.
API and developers
A documented REST API (OpenAPI), API keys, JSON responses with sources and real-time streaming.
Next step
Hosting, data, updates: what you control.