For AI governance, risk and compliance teams

Govern AI with a clear view of how it is actually used.

Policies and registers describe how AI should be used. PromptLeash shows how approved AI tools and agents are used in practice, by role and workflow, inside your own environment, so governance rests on what is happening rather than what is assumed.

Features

What PromptLeash gives you.

  • Policy signals

    Whether AI use follows your policies, read as part of adoption, so risk and value are visible in the same place.

  • One view across sources

    Activity from every AI source you approve, including providers, chat assistants, applications and agents.

  • Use cases in practice

    The AI use cases in use across roles and workflows, to keep your use case register current.

  • Change over time

    How use develops as tools, models and agents change, compared with your own prior periods.

Value

The value it creates.

A register that reflects reality
Keep your AI use case register and inventory aligned with how AI is used.
Focused oversight
Find where use diverges from the agreed process and where review steps need attention.
Reporting with confidence
Inform transparency statements, risk reviews and board reporting with a clear record of AI use.

Regulatory notes

Frameworks PromptLeash supports evidence for.

Meeting each framework remains your organisation's responsibility. PromptLeash supports evidence for parts of each one by showing how AI is used across roles and workflows, and how capability is developing.

  • Digital Transformation Agency

    Policy for the responsible use of AI in government

    Version 2.0 applies to non-corporate Commonwealth entities, with some exceptions, from 15 December 2025. Its mandatory requirements include accountable officials, transparency statements, internal AI use case registers and staff training on AI.

    Evidence PromptLeash supports

    How approved AI tools are used across roles and workflows, to inform your transparency statement and use case register, and to show where staff training is needed.

  • APS AI Plan 2025

    APS AI training goals

    The plan makes foundational AI training mandatory for all APS staff through the AI in government policy, and introduces Chief AI Officers to lead adoption in each agency.

    Evidence PromptLeash supports

    How AI capability is developing by role and workflow after training, so Chief AI Officers can see where people need more support.

  • National AI Centre

    Guidance for AI Adoption

    Published in October 2025, it sets out six essential practices for responsible AI adoption, including deciding who is accountable, measuring and managing risks, testing and monitoring, and maintaining human control.

    Evidence PromptLeash supports

    Ongoing evidence of how AI is used across roles and workflows, which supports measuring and managing risks, and testing and monitoring.

  • APRA

    CPS 234 Information Security

    Requires APRA-regulated entities to maintain an information security capability commensurate with the threats to their information assets, and to implement and test controls.

    Evidence PromptLeash supports

    How information is handled in approved AI tools against your policies, from a deployment that runs under your own security controls.

  • APRA

    CPS 230 Operational Risk Management

    In effect since 1 July 2025, it requires APRA-regulated entities to manage operational risk, maintain critical operations through disruption and manage material service providers.

    Evidence PromptLeash supports

    How AI tools are used across roles and workflows, to inform your view of critical operations and service provider dependencies. PromptLeash itself runs in your environment and sends nothing back.

  • AI management system standard

    ISO/IEC 42001 clauses

    Clauses relevant to AI use include 7.2 (competence), 7.3 (awareness) and 9.1 (monitoring, measurement, analysis and evaluation), with the Annex A controls for the use of AI systems (A.9).

    Evidence PromptLeash supports

    Competence and awareness by role, and ongoing measurement of how AI systems are used.

Trust notes

What to know before you start.

Deployed in your private environment

PromptLeash is deployed inside your environment, works under your security standards and has no external dependencies.

No data leaves

No telemetry, no usage data and no interaction content leaves your environment or reaches PromptLeash.

Your identity and access

Single sign-on and role-based access work within the configuration agreed for your deployment.

Assurance status

SOC 2
In progress,
targeted for the end of 2026
Independent penetration test
Planned,
targeted for the end of 2026

Review AI governance with your own activity.

Book a demo to see how PromptLeash reads AI use against your policies, or request the security pack for your risk review.