For AI governance, risk and compliance teams
Govern AI with a clear view of how it is actually used.
Policies and registers describe how AI should be used. PromptLeash shows how approved AI tools and agents are used in practice, by role and workflow, inside your own environment, so governance rests on what is happening rather than what is assumed.
Features
What PromptLeash gives you.
Policy signals
Whether AI use follows your policies, read as part of adoption, so risk and value are visible in the same place.
One view across sources
Activity from every AI source you approve, including providers, chat assistants, applications and agents.
Use cases in practice
The AI use cases in use across roles and workflows, to keep your use case register current.
Change over time
How use develops as tools, models and agents change, compared with your own prior periods.
Value
The value it creates.
- A register that reflects reality
- Keep your AI use case register and inventory aligned with how AI is used.
- Focused oversight
- Find where use diverges from the agreed process and where review steps need attention.
- Reporting with confidence
- Inform transparency statements, risk reviews and board reporting with a clear record of AI use.
Regulatory notes
Frameworks PromptLeash supports evidence for.
Meeting each framework remains your organisation's responsibility. PromptLeash supports evidence for parts of each one by showing how AI is used across roles and workflows, and how capability is developing.
- Digital Transformation Agency
Policy for the responsible use of AI in government
Version 2.0 applies to non-corporate Commonwealth entities, with some exceptions, from 15 December 2025. Its mandatory requirements include accountable officials, transparency statements, internal AI use case registers and staff training on AI.
Evidence PromptLeash supports
How approved AI tools are used across roles and workflows, to inform your transparency statement and use case register, and to show where staff training is needed.
- APS AI Plan 2025
APS AI training goals
The plan makes foundational AI training mandatory for all APS staff through the AI in government policy, and introduces Chief AI Officers to lead adoption in each agency.
Evidence PromptLeash supports
How AI capability is developing by role and workflow after training, so Chief AI Officers can see where people need more support.
- National AI Centre
Guidance for AI Adoption
Published in October 2025, it sets out six essential practices for responsible AI adoption, including deciding who is accountable, measuring and managing risks, testing and monitoring, and maintaining human control.
Evidence PromptLeash supports
Ongoing evidence of how AI is used across roles and workflows, which supports measuring and managing risks, and testing and monitoring.
- APRA
CPS 234 Information Security
Requires APRA-regulated entities to maintain an information security capability commensurate with the threats to their information assets, and to implement and test controls.
Evidence PromptLeash supports
How information is handled in approved AI tools against your policies, from a deployment that runs under your own security controls.
- APRA
CPS 230 Operational Risk Management
In effect since 1 July 2025, it requires APRA-regulated entities to manage operational risk, maintain critical operations through disruption and manage material service providers.
Evidence PromptLeash supports
How AI tools are used across roles and workflows, to inform your view of critical operations and service provider dependencies. PromptLeash itself runs in your environment and sends nothing back.
- AI management system standard
ISO/IEC 42001 clauses
Clauses relevant to AI use include 7.2 (competence), 7.3 (awareness) and 9.1 (monitoring, measurement, analysis and evaluation), with the Annex A controls for the use of AI systems (A.9).
Evidence PromptLeash supports
Competence and awareness by role, and ongoing measurement of how AI systems are used.
Trust notes
What to know before you start.
Deployed in your private environment
PromptLeash is deployed inside your environment, works under your security standards and has no external dependencies.
No data leaves
No telemetry, no usage data and no interaction content leaves your environment or reaches PromptLeash.
Your identity and access
Single sign-on and role-based access work within the configuration agreed for your deployment.
Assurance status
- SOC 2
- In progress,
targeted for the end of 2026 - Independent penetration test
- Planned,
targeted for the end of 2026
Other roles
See how PromptLeash helps other leaders.
Head of AI or transformation
How do we move from AI adoption to real value, with a workforce ready for what comes next?
Read moreCIO or CTO
Which AI tools and agents are used, by which roles, and how effectively?
Read moreCFO
What is AI costing us, what is it buying, and where should budget go next?
Read moreCHRO or people leader
Which skills need support as AI takes on more of the work?
Read more
Review AI governance with your own activity.
Book a demo to see how PromptLeash reads AI use against your policies, or request the security pack for your risk review.