AI Governance Platform

C.O.S.
Governed AI.
Every decision traceable.

C.O.S. is a model-agnostic compliance operational system for AI deployments. It evaluates regulatory applicability, versions policy independently of code, and makes every compliance decision replayable and auditable.

Request API access Read the API docs

Model Agnostic

Policy versioning Independent of API

Store PostgreSQL

Auth API key · per-org

API REST · v1

The platform

A governance layer between AI and regulation

Enterprise AI deployments face a structural problem: compliance obligations change independently of model providers, API versions, and engineering release cycles. Tying compliance logic to any single layer creates fragility.

C.O.S. separates policy from infrastructure. Compliance rules are versioned on their own axis — a regulatory update is a policy version change, not a code deployment. Your AI stack evolves; your compliance obligations evolve; neither forces the other.

∴

Documentation-first

Every decision is governed, traceable, and preserved. No silent state changes.

⊗

Model-agnostic

Logical roles — not model names. Swap providers without touching compliance logic.

⊞

Policy-versioned

Compliance rule sets are independently versioned. Audit any decision against the policy active at the time it was made.

⊡

Multi-jurisdiction

Industry × jurisdiction × data classification. Rules derive from the intersection — not from hardcoded logic.

// Operator

Integrate in minutes

The C.O.S. API is a REST interface with API key authentication. Organisations are provisioned as tenants. Every request is scoped to an org.

Quick start

# Check API health (unauthenticated)
curl https://cosprotocol.io/v1/health

# List your organisations (authenticated)
curl -H "Authorization: Bearer $COS_API_KEY" \
     https://cosprotocol.io/v1/organisations

# Retrieve org profile with industry classification
curl -H "Authorization: Bearer $COS_API_KEY" \
     https://cosprotocol.io/v1/organisations/{org_id}

Auth model

Header Authorization: Bearer <key>

Key format cos_live_<48 chars>

Scope Per-organisation. One key per org.

No-key response 401 Unauthorized

API surface · v1

GET /v1/health Liveness · unauthenticated

GET /v1/version Version metadata

/v1/organisations List · create · read · update

/v1/…/members Membership management

/v1/…/api-keys Key provisioning

Full OpenAPI specification → docs.cosprotocol.io

Request API access

C.O.S. is in private access. Submit your email and we will be in touch to provision your organisation.

C.O.S. Governed AI.Every decision traceable.