Square Agent Square Agent
Contact us

AI Governance Gateway

“Everyone's using AI. Nobody knows who's using what.”

Access is ad hoc, nothing's documented, and no one can say what's safe.

One governed MCP endpoint for every AI client and company tool.

Connect existing AI clients, Square Agent AI OS, or Square Agent Live through one gateway. For employee deployments, the gateway can evaluate company identity and tool policy before a call reaches an approved tool, then record the decision.

Maya Chen · Entra ID any client Square Agent Gateway identity · policy · approval · audit one MCP endpoint Payroll · run_adjustment denied — not in Finance-Admin Xero · get_invoice allowed — key injected, call logged

What happens to every call

Who signs the person in?
Your identity provider — Entra ID or Google. The gateway has no passwords of its own.
Where do tool keys live?
In the deployment’s secret store, injected only after a call is allowed. AI clients and models never see them.
What gets checked?
The person’s groups, the tool, and the action — on every call. Sensitive writes wait for a human.
What gets recorded?
Who, which client, which tool and action, the decision, and when.

Your organisation's groups applied.

Membership lives in Microsoft 365 or Google — administered by IT, not by us. The gateway gates every call on those groups.

Your groups

Microsoft 365

Google

AI Governance Gateway

Microsoft 365 · Finance · AP

  • Outlook · raise invoice

    allowed

  • Xero · read supplier

    allowed

  • Drive · export Legal

    denied

What a gateway gives you

With a live directory integration, removing a person’s access changes the policy used for later calls.

Tool access follows the identity and policy presented to the gateway, not the choice of AI client.

Tool credentials stay in the deployment’s secret store. The gateway retrieves them only after it allows a call, so the AI client does not receive the credential.

  • Maya Chen

    Copilot · Slack · post_message

    allowed

  • Maya Chen

    Claude · Slack · post_message

    allowed

  • Priya Shah

    ChatGPT · Send chase email to Acme

    Deny Approve
    waiting

What the gateway does not decide

The gateway controls access to company tools. It does not, by itself, control how an AI model provider stores prompts or tool results after receiving them. Provider choice, account settings, contract terms and retention settings still need a separate review.

Runs where you do.

Deployment options depend on the systems and identity provider involved. We agree the hosting boundary, data location, support access and operating responsibilities before work starts.

Microsoft 365

Connect Microsoft identity and tools when they are part of the agreed deployment.

Azure

A customer-controlled Azure deployment is available as an enterprise implementation option.

Google

Use Google Cloud and Google identity where the required integrations support them.

Managed

Square Agent can host the deployment under agreed data, support and operating terms.

The clients you already use. The stack you already run.

  1. Everyone in your business is already using AI.
  2. Nobody can say who's using what, or what it can touch.
  3. Right now every AI client talks straight into every tool.
  4. Claude has one set of keys. Copilot has another.
  5. Nothing is documented and nothing is checked.
  6. The Square Agent Gateway puts one door in the middle: one governed endpoint for every AI client and every company tool.
  7. Every call is a person.
  8. Maya signs in with your identity provider, uses whatever client she likes, and the gateway checks her groups, the tool and the action before anything happens.
  9. Xero, get invoice: allowed.
  10. The key is injected and the call is logged.
  11. Payroll adjustment: denied.
  12. She isn't in finance-admin.
  13. Permissions come from the groups IT already runs in Microsoft 365 or Google.
  14. Drop someone from a group and the next call is denied.
  15. Tool credentials stay in your secret store.
  16. The model never sees them.
  17. Sensitive writes wait for a human.
  18. Runs on Microsoft Azure, Google, or hosted by us.
  19. People keep the AI they already use.
  20. You keep control of what it can touch.
  21. Square Agent Gateway.

Square Agent AI OS and Live can use this layer when their deployment needs shared controls. See Square Agent AI OS or see Square Agent Live.

Talk through the work

Bring a technical problem or an opportunity you think AI could help with. We will use 20 minutes to work out whether there is a useful next step.

Book a conversation