ITSM for AI agents™

Your agents are ready for real work. Record makes it safe to hand it to them.

Agents have moved from answering questions to doing the work: paying invoices, changing systems, and talking to customers. Record gives each one an owner, the access its job needs, and a person on every high-stakes step, so finance, IT, security, and operations can put agents into production.

Use the agents you already have

Govern any agent. Run critical workflows in Record Runtime.

Connect agents built with any framework. Record gives every team one place to manage models, access, policy, approvals, spend, incidents, and traces, and to turn their best runs into private models. For workflows that need stronger protection, run them in Record Runtime.

Any connected agent

Record Platform

Any agent stackConnect existing agents without rebuilding them.
Agents never hold credentialsAccess is issued for each action and expires right after. Agents never see the secret.
Approved models, tools, and knowledgeOne vetted catalog of models, MCP servers, APIs, and skills, plus company knowledge and agent memory.
Smart model routingSend each request to the right model for cost, speed, and quality.
Spend controlBudgets by agent and team, enforced before the call.
Policy and approvalsAllow, block, or require approval for sensitive actions.
Work where your teams areRun agents and approve actions in the app, Slack, Teams, the CLI, or the API.
End-to-end tracesEvery prompt, tool call, decision, and cost, tied to the agent and the person behind it.
Signals and incidentsDetectors turn failures and risky behavior into owned issues with a likely root cause.
Before and afterEach new agent version measured against the last on live conversations, check by check.
Private modelsOpen-weight models trained on your best runs, hosted privately behind your gateway, for up to 60% less at scale.
Yours to keepSingle-tenant, in our cloud or yours. Your agents, policies, and audit history stay yours.
Headless by designEverything in the console is also in the CLI and API, so Claude, Codex, or any agent can operate Record.
ConsoleCLIAPI
Run critical workflows in Record Runtime for stronger protection
Critical workflows run by Record

Record Runtime

Managed and sandboxed
Use your preferred agent stackClaude, Codex, Hermes, or your own custom agent, with more on the way
ClaudeCodex☤HermesCustom
Isolated sessionsEvery session runs in its own sandbox. Nothing is shared between users or runs.
Kernel-level enforcementFiles, processes, and network are enforced by the kernel, not by the agent behaving well.
Zero secrets insideCredentials stay outside the sandbox, out of reach of generated code.
Approved destinations onlyOutbound traffic reaches only the places policy allows.
Runtime evidenceEvery file, process, and network event is recorded and tied to the decision behind it.
Simulation before productionRehearse new agents and changes on saved scenarios with simulated tools, under your real policy and approvals.
Managed runtimeRecord handles execution, recovery, and completion.
Reliable workflowsPause and resume long-running work without losing progress.
One gateway for every model and tool

Every model and tool, routed and within budget.

Give teams hundreds of models and a governed tool registry behind one endpoint, route each request to the right model, and stop overspend before it happens.

Approved for Engineering9 models
claude-opus-5-5Anthropic · frontierapproved
gpt-6-astraOpenAI · frontierapproved
claims-triage-7bYour tuned open-weight modelprivate
new-provider-xRequested yesterdayblocked
Unreviewed providers stay blockedTeams still get new models on day one
Every model, one endpoint

Give every team hundreds of models through one approved endpoint.

OpenAI- and Anthropic-compatible APIs work with the tools teams already use. Unapproved models stay blocked, and private models trained on your own runs sit beside the rest.

Smart routingsupport-bot
RequestSummarize a support ticket
gpt-6-astraFrontier$0.050
gemini-3.8-flashFast · right for the task$0.001
Routed to gemini-3.8-flash98% less than a frontier model
Smart routing

Send each request to the model it actually needs.

Simple work goes to fast, inexpensive models and hard problems go to frontier and reasoning models, with estimated savings reported for every request.

support-bot · retry loopSupport team
Spend rate$412 / hrThe same failing request, retried 9,800 times
Team budget$3,000 of $3,000
Owner alertedMaya Chen
Stopped at the limit · 02:14No spend past $3,000
Spend control

Stop overspend before the call, not after the invoice.

Set budgets per agent and team, enforced before each request. Track cost down to the user and model, and reuse identical answers instead of paying twice.

github · MCP serverPlatform Engineering
Search code, read issuesall teams
Create issues and commentsengineering
Merge pull requestneeds a person
Delete repositoryoff
Credentials held by RecordNo agent ever sees the GitHub token
One registry

Manage models, MCP servers, APIs, and skills in one place.

One governed catalog for every team. Access is checked on every call, and any tool can be switched off for every agent at once.

Control before action

Set what every agent can do.

Assign an owner, control which systems and data the agent can access, apply policy, and require approval before sensitive actions.

Access · NetSuiteinvoice-agent for Priya Shah
RequestedCreate one vendor bill14:02:11
Issued to RecordAfter policy allowed it14:02:11
UsedBill #4471 created14:02:13
Expired14:06:11
Never held by the agentExpired four minutes after it was issued
Ownership and access

Give every agent an owner and only the access it needs.

Define the job, assign an owner, choose the systems the agent can use, and remove access when the work is done.

Test a decisionSupport tools · v7
ActionRefund $1,200 to a customer
Agentsupport-bot
Policy matchedRefunds over $500
AnswerNeeds a person
Checked before deployPolicies it cannot enforce are refused
Policy as code

Write the policy once. Keep every change on record.

Policies are simple, version-controlled files that any coding agent can help write. Allow, block, or require approval for each action, add conditions like payment amount, and test a decision before it deploys.

IT SecurityTeams · now

joiner-mover-leaver wants to grant admin in Okta to a new contractor.

Requested forSarah Chen · IT
ReasonOnboarding ticket IT-2231
RiskAdmin on production
ApproveDeny
Waiting for SecurityNothing happens until someone decides
Human approval

Require approval before sensitive actions.

Payments, production changes, and sensitive exceptions pause for the right person, then continue after a decision.

Protect work while it runs

Let agents do real work without creating new risk.

Record Runtime runs Managed Agents, each session in its own Agent Sandbox. Actions outside policy are stopped before they happen, and work recovers when something fails or waits for approval.

close-agent · generated codeSession 7712
Write recon.xlsxFileallowed
Run reconcile.pyProcessallowed
Read cloud credentialsFileblocked
Upload to paste-host.ioNetworkblocked
Stopped before it ranEnforced outside the agent
Sandboxed Runtime

Run agent workflows in a protected environment.

Record Runtime enforces files, processes, and network at the kernel, records every event, and keeps work recoverable when something fails or waits for approval.

claims-processor5 entry points
Slack@record triage claim #4471started
Teams/run due-diligencestarted
Your claims appNew claim submittedstarted
Another agentDelegated by close-agentstarted
Same policy from every entry pointNothing extra to secure per channel
Start anywhere

Start controlled workflows where work begins.

Trigger the same controlled workflow from Slack, Teams, business events, APIs, or other agents.

Observe and improve

See every agent in one place. Make each version better.

Track which workflows are working, what they cost, where they fail, and who owns the next step. Then prove each fix and turn your best runs into private models.

Spend by teamSeptember
Support14 agents · 212 users$21,300
Engineering22 agents · 42 users$18,900
Salesresearch-agent is $9,840 of it$12,200
Reconciled to the invoice$68,412 · every dollar attributed
Results and spend

See results and cost across every agent workflow.

Track status, owner, approvals, and business results next to what each workflow costs, attributed by team, agent, user, and model.

INC-214 · refunds failingP1
Opened37 failed runs grouped09:16
OwnedMaya Chen · 09:16
Fix deployedToken scope restored09:38
Resolved09:40
Closed in 24 minutesReopens automatically if it returns
Owned issues

Turn repeated failures into assigned issues.

Group related failures, set priority, assign an owner, and track resolution instead of searching across disconnected logs.

Policy receiptrc-7f3a
Who askedclose-agent for Priya Shah
PolicyPayments over $10,000 · v12
Decided byDana Reyes · 14:02
OutcomePayment stopped
Receipt sealedLinked to the full trace
Receipts and traces

Answer who acted, under what authority, with which access, and what happened.

Every action carries a policy and access receipt, linked into one end-to-end trace: the agent, the person behind it, the approval, the credential used, the cost, and the outcome.

support-agent · new version vs. last1,240 conversations
Missing context18% → 4%better
Customer goal reached71% → 84%better
Task failed6% → 5%no change
Prompt injection2 → 0too few to call
Better than the last versionTwo checks improved, none got worse
Before and after

Know each fix worked, not just that it shipped.

Replay a failed conversation in simulation, prove the fix, then see the new version against the last on live traffic, check by check.

Validation · ticket-routing600 held-out tickets
Routed correctly93.4% today95.0%
Urgent tickets misrouted4 today1
Cost per successful task$0.018 today$0.008
Median response time1.8 s today0.6 s
Ready to adoptMet every bar your team set
Private models

Turn your best runs into a model that’s yours.

Approved runs train a private open-weight model for repeat work, at up to 60% lower cost at scale. You see it beat your current model on the same cases before any agent switches.

Built-in assistant

Operate Record by asking.

The console’s assistant does the work, not just the explaining. It deploys agents, checks configuration, reads traces, and troubleshoots with your permissions and never more, and it asks before any change.

AssistantYour permissions
You askedWhy did support-bot fail so often this week?

34 runs failed on the same Zendesk tool after its access scope changed on Tuesday. Restoring the ticket-update scope and redeploying fixes it.

RedeployNot now
Asks before any changeWith your permissions, never more
Does the work

From question to fix in one conversation.

Ask why something failed and get the cause and the change that fixes it. It is governed like every other agent, with its own policy and receipts.

The agent lifecycle

IT service management, for agents.

Follow one agent through a month-end close. Each step is a discipline your IT team already runs, rebuilt so every agent action carries identity, ownership, task-scoped authority, policy, approvals, spend, incidents, and evidence, and every close sets up a better next one.

  1. BuildAsset & configuration management for agents

    Describe the outcome. Record builds the agent.

    The job, its base, tools, and policy become one managed agent, registered with an accountable owner before it ever runs.

    New agentPriya Shah · Finance
    Describe the jobClose the books every month and flag variances over $5,000
    OwnerPriya Shah
    BaseClaude
    PolicyMonth-end close · v12
    Registered with an ownerBefore it ever runs
  2. Identity & accessAccess management for agents

    It needs to post to your accounting system.

    Record issues access for exactly that task, uses it on the agent’s behalf, and lets it expire. The agent never holds the credential.

    Access · NetSuiteclose-agent for Priya Shah
    RequestedPost journal entries17:58
    Issued to RecordAfter policy allowed it17:58
    ExpiredWhen the task ended18:02
    Never held by the agentIssued for this task only
  3. KnowledgeKnowledge management for agents

    It doesn’t start from scratch.

    It works from last quarter’s close, the chart of accounts, and past exceptions, each with its source, and only what Priya is allowed to see.

    Context for this closeFinance knowledge
    Q3 close playbookfinance · section 4source
    Chart of accounts142 entitiessource
    Prior close exceptions2 flagged last quartersource
    3 sources, each citedOnly what Priya may see
  4. ToolsService catalog for agents

    It needs your enterprise systems to do real work.

    It draws from one governed catalog of MCP servers, APIs, and skills, scoped to this job and checked on every call.

    Tools · close-agentFrom the catalog
    NetSuite · post journal entriesscoped
    Banking · read balancesread only
    Slack · post to #finance-closeallowed
    NetSuite · delete vendoroff
    Checked on every callScoped to this job
  5. ApprovalsChange management for agents

    It’s about to post a $1.2M journal entry.

    It pauses for the controller in Slack, Teams, or the console, and continues only after a decision, recorded with the policy that required it.

    Finance CloseTeams · now

    close-agent wants to post a $1,200,000 journal entry across 12 entities.

    PolicyEntries over $250,000 · v12
    ApproveDeny
    Waiting for the controllerNothing posts until someone decides
  6. Security & policySecurity management for agents

    A poisoned invoice tells it to export the customer table.

    Blocked inside Record Runtime. Files, processes, and network are checked against policy outside the agent, so the block holds even if the agent goes around the gateway.

    Record Runtime · run 8f2cclose-agent
    Write the workbookFileallowed
    Run reconcile.pyProcessallowed
    Upload the customer tableNetwork · collect.badactor.devblocked
    Blocked before it ranEnforced outside the agent
  7. Spend & smart routingFinancial management for agents

    The close makes 4,000 model calls.

    Routine calls go to fast models and hard ones to frontier models, the budget is checked before every call, and every dollar is attributed to the agent, team, and person.

    Spend · this closeclose-agent
    Model spend$212of a $400 budget, checked before every call
    Routed to a fast model71% of calls
    Attributed toFinance · Priya Shah
    $96 saved by smart routingEstimated against one frontier model
  8. IncidentsIncident management for agents

    Mid-close, payment posting starts failing.

    Record groups the failures into one incident with an owner, alerts the team in Slack, and suggests a likely cause, before anyone files a ticket.

    INC-318 · postings failingP2
    Grouped23 failed postings, 1 agent18:21
    OwnerPriya Shah
    Likely causeAI suggestedToken scope changed
    Owned in 3 minutes#finance-ops alerted in Slack
  9. Audit & evidenceAudit & compliance for agents

    The auditor asks what it touched, and who approved it.

    One receipt connects the person behind the agent, its identity, the policy, the access used, the approval, the cost, and the outcome.

    Receipt · month-end closerc-9a41
    Acting forPriya Shah · Finance
    AccessNetSuite · 17:58–18:02
    Approved byDana Reyes · 18:05
    Cost$212
    Answered from one receiptNo log archaeology
  10. ImproveContinual improvement for agents

    Next month’s close should run better than this one.

    The failed postings replay in simulation, the fix is proven before Priya deploys it, and next month’s run is measured against this one. Approved runs can train a private model for the work it repeats.

    close-agent · next versionAfter INC-318
    Failed postings replayedSimulated toolsfix passes
    DeployedBy Priya Shahv13
    Failed postingsv12 → v1323 → 0
    Better than last monthMeasured on live runs, check by check
  11. Then the next run starts here.Next month’s close starts from a proven fix, with every receipt, cost, and incident from this one on the record.
See Record in action

See how Record controls a real agent workflow.

We will show how Record manages access, policy, approvals, execution, spend, incidents, and audit from start to finish.