Open Source AI Governance

Enterprise AI
Governance & Compliance

Centralized oversight of AI systems, agents, and API usage. Track risk, compliance, shadow AI, and costs across your organization.

15+ AI Models Tracked
6 Risk Dimensions
5+ Shadow AI Sources
4 Approval Stages

Everything you need to govern AI

From shadow AI discovery to executive dashboards, UrNammu covers the full governance lifecycle.

📋

AI System Registry

Maintain a centralized inventory of every AI system in your organization, with ownership, risk level, and approval status tracking.

🤖

AI Agent Registry

Track autonomous agents with autonomy levels, human-in-the-loop requirements, and capability inventories.

🧩

AI Skills Catalog

Sync published skills, apps, and prompts from CertifID Forge, auto-promoting agent-like content into the Agent and System registries.

🎯

Risk Center

Multi-dimensional risk scoring across bias, security, privacy, fairness, performance, and transparency with interactive heat maps and agent-aware overlays.

👁

Shadow AI Discovery

Detect unregistered AI tools across Google Workspace, Microsoft 365, Hexnode-managed devices, CrowdStrike Falcon, and DNS / proxy / Netskope logs. Auto-triage, approve, or block.

📜

Policy-as-Code & Compliance

Enforce machine-readable policy rules at the proxy (off / dry-run / enforce), track per-system compliance with evidence, and review every block in the Policy Denials log.

📊

AI Oversight

Monitor usage, costs, and anomalies across provider admin APIs, AI gateways (Helicone, OpenRouter, Portkey, LiteLLM), and Gemini / Vertex billing, with investigations and vendor governance.

💻

Developer AI Dashboards

Per-surface telemetry for Claude Platform / API, Claude Code, Cowork, and Cursor — cost, productivity, and dangerous-prompt detection from a live OpenTelemetry pipeline.

📑

Custom Reporting

Build governance reports from templates, export to PDF / CSV / JSON, and schedule recurring email delivery for boards and auditors.

Built on modern foundations

Enterprise-grade stack with security, performance, and developer experience in mind.

Next.js 16 + React 19

App Router with server components, Turbopack, and edge-ready deployment on Vercel.

PostgreSQL + Prisma

Type-safe database access with full migration support. 15+ data models for governance tracking.

Provider-Agnostic AI

Anthropic Claude, OpenAI GPT, and Google Gemini for risk classification and compliance gap analysis — with a transparent proxy that enforces policy on every call.

Enterprise Auth

Google OAuth, Microsoft 365, and local accounts. Role-based access control with Admin, Compliance Officer, and Viewer roles.

Ready to govern your AI systems?

Get started with UrNammu in minutes. Open source, self-hosted, enterprise-ready.