Oversight & compliance
A system that observes how people work is high-risk under the EU AI Act. Most vendors answer that with a policy document. Nebbos answers with how it's built — and you can read the guarantees below.
Certification status to be confirmed before publishing.
The guarantees
Defence in depth
Oversight that lives in one layer can be bypassed in another. Nebbos enforces the human checkpoint at every level of the stack, so a change to how work runs can't slip through.
Changes are submitted to an approval flow, not pushed straight through.
Workflow changes require a valid approval token, or they're refused.
The agent pauses on consequential tools and cannot proceed without a human resume.
Tools check the approval context before any logic runs.
Unauthorised writes to workflow tables are caught — with alert and rollback.
Requires two senior approvers, a priority alert, and an automatic post-incident review.
Layers of governance
Governance that treats every action the same is either too slow to live with or too loose to trust. Nebbos runs four tiers: routine, reversible work moves on a light lane; anything that can change how the organisation runs takes the heavy one. The red lines — approval gates, prohibited actions, isolation — bind every tier without exception.
The only tier that can change the system of record. Full review, full audit.
Reasoning and drafting against approved context. Binding only once promoted through a G0 gate.
Routine production work under standing rules. Human sign-off, light weight.
Read-only and exploratory. Produces findings, never changes anything on its own.
And before any consequential action runs, the Simulation Gate rehearses it against a private copy of your operation, checks the outcome, and throws the copy away — so the real thing only ever sees a move that's already been tested.
Data handling
Nebbos stores structured signal — patterns, thresholds, relationships, timing — rather than the raw text of your messages and documents. The Operational Graph is a map of how work moves, not an archive of what everyone said.