Home · Platform · Platform · Governance
Governance that binds the agent too.
Most platforms bolt governance on for the enterprise tier and exempt their own AI from it. Noice.work inverts both: identity, review, releases and audit are the substrate everything runs on — and the agent is subject to all of it, which is the only honest way to run one.
Who can do what, exactly
Named users belong to organisations with five roles — owner, admin, publisher, editor, viewer — enforced on every mutation, with per-site overrides for multi-site organisations. Sign-in is single sign-on via Google or Microsoft Entra, pinnable per organisation so sign-ins through any other provider fail closed. Credentials are individually revocable: sessions, API keys, preview links — offboarding one person never means rotating a secret everyone shares.
How a change becomes live
Draft, review, publish — with multi-step review chains where you need them: ordered steps, each naming who may act, with no-self rules so a submitter can never approve their own work. Publishing mints an immutable, content-addressed release; a reader always sees a complete release, never a torn mix. Rollback is one guarded pointer flip that mints a new release rather than rewriting history. Scheduled publishing, embargo and expiry run against frozen approved bytes.
Every management action — by a person, the platform agent, or an external agent over MCP — lands in an append-only audit log, filterable and exportable, with SIEM polling supported through a dedicated read-only scope. “Who changed what, when” is answerable, and the answer cannot be edited.
The compliance drawer
Data-subject access and erasure run as an audited case ledger with per-store evidence reports. Retention is configurable per site and its sweeps are themselves audited. Accessibility is a regression ratchet in the build pipeline, and the closed component catalogue means auditing components once lets every composed page inherit the result — a structural claim a freeform-HTML platform cannot make.
Questions people ask
Does the AI bypass any of this?
No, and that is the point. The agent authenticates, holds a role, faces the review chain and writes audit rows exactly as a person does. External agents over MCP hold exactly the role their key carries.
Is governance an enterprise-tier feature?
Identity, roles, releases, rollback and audit are the platform, not a tier. Talk to us about which plan fits your team's shape.