The terms that come up in your meeting.
AI governance with no empty jargon — every term defined in depth, with the real mechanics behind it.
Risk
Control
DLP (Data Loss Prevention)
The set of controls that keeps sensitive data from leaving the perimeter. For AI, it means inspecting every prompt before the provider and masking or blocking CPF, cards, credentials and PII.
ControlAI governance
A company's ability to apply its rules to AI usage — over data, cost, models, access and channels — with real-time enforcement and an audit trail, not just a policy on paper.
ControlVirtual key
A credential issued by the layer to each team or person, in place of the provider's real key. It carries the access profile: allowed models, budget and identity for the trail.
ControlModel allowlist
The list of models approved for use, per organization and cost center. Default-OFF: anything not explicitly approved is refused with a 403, before tokens are spent.
Architecture
Multi-tenant
An architecture where each organization or department operates in an isolated space (organization), with data, keys, budgets and permissions that never mix.
ArchitectureFail-closed
An architectural decision: if the security control becomes unavailable, the request is stopped rather than passed through uninspected. The default protects the data, not the convenience.