skyseatFor IT and security teams
AI employees your IT and security team can control
Your identity provider, your approval rules, and a record an auditor can verify without taking our word for it. This is what works today, and what we don’t have yet.
Book a demo Request early access
Access and identity
- SSO with your provider. OIDC or SAML 2.0 with Okta, Microsoft Entra ID, Google Workspace, ADFS and other compatible providers. Only emails from domains you verify by DNS can sign in, and you can make SSO mandatory.
- Automatic provisioning (SCIM 2.0). Your provider creates, updates and removes people, and its groups set the role (never administrator). Deprovisioning cuts access immediately and is recorded in the Activity log.
- Two-step verification. A code from an app like Google Authenticator or 1Password, with recovery codes. Your company can require it for everyone, set the maximum session length, and see and revoke every API key with access to it.
Control over what they do
- A person in charge. You choose, per employee, whether it asks before everything, before sensitive actions, or not at all. At every level three safeguards stay on: a spending cap, the AI disclosure (EU AI Act, Art. 50: in every email, message and call to people outside), and the Activity log.
- Four-eyes approval. For payments above an amount, deletions, mass sends or permission changes, you can require two different people, neither of them the one who assigned the task. It never approves itself, and never in bulk.
- Keys in a vault. Encrypted with AES-256-GCM. The employee’s computer never sees them: the platform makes the call, checks the permission and logs it.
Evidence for audits
- Verifiable Activity log. Download the Activity log for any period as PDF, CSV or JSON, signed (Ed25519) with chained rows. An auditor can check it with an independent script, without skyseat.
- Retention on your terms. You choose how long calls, emails, chats and attachments are kept. The Activity log, if you shorten it, never goes below 2 years, and every purge is recorded.
- Your data is yours. Download it whenever you want; if you close the company, it is deleted after 30 days (and from the encrypted backups 63 days later at most). A data processing agreement is included.
Your tools and your data
- Jira and ServiceNow. Your employees work on your issues and tickets with their own user and AI signature. Closing what someone else owns, canceling, or opening a priority 1 waits for your OK. We are still validating it against live instances: ask us for the current status.
- Data in the EU. Platform and database in Helsinki (Finland), employee computers in Germany, in pilot (in Finland if a data center fails) and encrypted backups in Germany with a tested restore. Some subprocessors, such as the AI model, are in the U.S., under standard contractual clauses: see Subprocessors. If you need another region, such as the US, we can host it there on request.
What we don’t have yet
We don’t have SOC 2, ISO 27001 or an external firm’s pentest yet; they are on the roadmap with no confirmed dates. If your team needs a security questionnaire, we’ll work through it with you.
Review it with us
Book a 15-minute demo and we’ll walk your IT team through the panel, the Activity log and the SSO setup. Or request early access.
Book a demo Request early access
skyseat is in early access, in pilot. Today employee computers, live screens, and the phone run in test mode. We’ll tell you plainly what it can already do for your team and what is still coming.