Security & Governance

Trust, access, and oversight built into the platform.

Mentoros is designed for enterprise environments where assistants must be permissioned, scoped, reviewable, and accountable. Governance, access control, auditability, and privacy-aware operation are built into the platform architecture — across deployments, integrations, and intelligence.

Governance stackPer deployment

AI Assistants

L1
Scoped capabilities·Policy boundaries

Connected Sources

L2
Permissioned access·Source-aware visibility

Intelligence Layer

L3
Role-aware insight·Auditable views

Admin Console

L4
Central configuration·Oversight & review

Access model

Role-aware

Scope

Per deployment

Audit

Logged centrally

scoped · role-aware · auditableBuilt into the platform
Built In, Not Bolted On

Governance is part of how the platform runs.

Access, scope, and oversight are platform primitives — not features added after deployment. The same controls apply across assistants, integrations, and intelligence, and live where the platform itself is configured.

01

AI Assistants

Each assistant operates within an explicit scope of capabilities, sources, and policies.

02

Connected Sources

Integrations are scoped, permissioned, and never universally exposed across deployments.

03

Intelligence Layer

Analytics and conversation review respect the same access boundaries as the assistants.

04

Admin Console

Configuration, roles, audit, and oversight are operated from one control plane.

Core Trust Pillars

The controls that hold the platform accountable.

A focused set of platform-level controls — each one operational, not aspirational.

01

Role-based access

Permissions defined per workspace, role, and deployment — enforced consistently across surfaces.

02

Deployment scoping

Each deployment runs inside its own boundary of sources, capabilities, and visibility.

03

Audit trails

Configuration changes, access events, and review activity are logged centrally and per deployment.

04

Encryption

Data is encrypted in transit and at rest, with key handling aligned to enterprise expectations.

05

No training on customer data

Customer conversations and source content are not used to train shared or third-party models.

06

Data residency options

Residency configurations are available where supported, to align with regional and policy requirements.

Mentoros communicates capabilities it can support today — not certifications it does not yet hold.

Role-Aware Access

Control what each deployment can access.

Assistants, sources, actions, and analytics are scoped by deployment, team, and role. Access follows context — not a single global permission set.

01

By deployment

Customer-facing, support, and internal deployments each see their own scope of sources and capabilities.

02

By team

Workspaces define which teams operate which deployments — and what they can configure.

03

By role

Roles determine who can read, configure, review, or audit — across every surface of the platform.

04

By source

Connected sources stay bound to the deployments authorized to use them — no implicit cross-access.

Scope, applied consistently

Per deployment
SurfaceCustomer-facingSupportInternal
SourcesCatalog · CMS · StorefrontKB · CRM · TicketsWiki · SOPs · Drives
ActionsBrowse · RecommendLookup · TriageSearch · Summarize
InsightBehavior · ConversionResolution · EscalationKnowledge demand
ReviewersCX · BrandSupport opsIT · Knowledge ops
Auditability & Oversight

Reviewable, observable, and accountable by design.

Oversight is treated as a first-class platform capability — covering conversations, configuration, access, and source visibility.

console.mentoros.ai / audit

Activity & audit log

Mentoros Support · last 24 hours

Audit-grade
  • 14:02
    Updated policy: Refund eligibility
    priya.r
  • 13:41
    Granted reviewer role on Support · EU
    marc.t
  • 12:18
    Conversation flagged for oversight
    system
  • 09:47
    Connected source: Tickets (read-only)
    lina.k
  • 08:12
    Daily configuration snapshot recorded
    system
Logged · attributed · scopedPer deployment

Conversation review

Inspect, replay, and annotate real conversations — inside the deployment they belong to.

Configuration history

Track who changed what and when — across personas, policies, sources, and deployments.

Access review

Visibility into who has access to which deployments, sources, and intelligence views.

Activity logging

Audit-grade logging of platform actions, with consistent shape across deployments.

Action attribution

Operator and assistant actions are attributed clearly — useful for review and governance.

Operational continuity

Reviewability persists across configuration changes, version updates, and deployment edits.

Data Handling & Privacy

Customer data stays under customer control.

Privacy-aware operation is part of the platform model. Mentoros operates on approved sources, within configured scopes, and without using customer content to train shared models.

No training on customer data

Conversations and source content are not used to train shared or third-party models.

Bounded by deployment

Data is handled inside the boundary of the deployment that produced it — no implicit reuse across tracks.

Designed with GDPR principles in mind

Architectural choices reflect GDPR principles such as scope, minimization, and accountability.

Residency options where supported

Where regional residency is required, configuration paths are available to honor it.

Source-governed retrieval

Retrieval respects source-level permissions — the platform never widens access on its own.

Encryption in transit and at rest

Encrypted across the platform, with key handling aligned to enterprise expectations.

Mentoros communicates how the platform is designed to operate — not legal guarantees. Specific contractual and compliance commitments are reviewed per engagement.

One Control Model

The same controls apply across the platform.

Governance is not limited to the response layer. The same access, scope, and oversight model extends to connected systems, tool-use, and the intelligence built on top.

Across integrations

Connected systems and actions inherit the deployment’s scope — read paths and write paths alike.

  • Per-deployment authorization
  • Action-level permission boundaries
  • No universal source exposure

Across intelligence

Operational signal and conversation review follow the same role and deployment boundaries as the assistants.

  • Role-aware analytics views
  • Source-aware insight only
  • Audit-logged exports

Across configuration

Persona, policy, source, and assistant configuration changes are attributed, reviewable, and reversible.

  • Change history per deployment
  • Reviewer roles on sensitive edits
  • Snapshot-grade traceability
In the Admin Console

Operated from the same console that runs the platform.

Security and governance are not a separate product surface. Roles, scopes, sources, audit, and oversight are configured where the rest of the platform is configured.

console.mentoros.ai / governance

Governance · Mentoros Support

Workspace: Customer Operations

Governed

Deployment

Mentoros Support · EU

SupportActive

Active scopes

SourcesKB · CRM · Tickets
ActionsLookup · Triage
VisibilitySupport ops · EU
ResidencyEU

Roles

  • Operator
    4
  • Reviewer
    6
  • Read-only
    12
Scoped · attributed · auditablePer deployment

Workspaces & roles

Define who operates what — across deployments and teams.

Deployment scoping

Bound sources, capabilities, and visibility per deployment.

Source permissions

Authorize, scope, and revoke connected systems centrally.

Conversation review

Inspect real activity — inside the deployment that produced it.

Audit visibility

Searchable logs of configuration, access, and review events.

Policy & persona

Configure assistant behavior under reviewable policy boundaries.

The Business Case

Why this trust model works for enterprise teams.

01

Governed from day one

No separate control layer to design, integrate, or bolt on after deployment.

02

One trust model, many deployments

Customer-facing, support, and internal deployments operate under the same controls.

03

Permissioned rollout, pilot to production

Scope expands deliberately as deployments mature — not by default.

04

Built for enterprise procurement

Visibility, auditability, and access discipline that hold up to operational and security review.

Ready When You Are

Let’s map Mentoros to your trust requirements.

Walk through your governance model, deployment scoping, data handling expectations, and enterprise rollout requirements — and see how Mentoros aligns with them.