What compliance standards does OrchStack Control support?

OrchStack Control is built for enterprise compliance. We support SOC 2 Type II, GDPR, HIPAA (with BAA), and ISO 27001 controls out of the box. All audit logs are immutable and exportable in standard formats for your compliance team. We also support data residency requirements with region-specific deployments.

How does RBAC work in OrchStack?

OrchStack implements a hierarchical RBAC model across four levels: Organization, Workspace, Project, and Agent. Each level supports custom roles with granular permissions — from read-only viewers to full administrators. Roles cascade downward but can be overridden at any level. We integrate with your existing SSO/SAML provider so there is no separate identity system to manage.

Can I set spending limits per agent or workspace?

Yes. OrchStack Control lets you set token budgets and dollar-amount spending limits at the agent, project, and workspace level. You can configure alert thresholds (e.g., warn at 80%, pause at 100%), automatic model downgrade policies, and hard caps that auto-pause agents when reached. Real-time cost dashboards show spend by agent, model, and time period.

How is ROI calculated on the Outcome Dashboards?

Outcome Dashboards track business metrics that your agents directly influence — bookings created, revenue attributed, tickets resolved, retention rates, and more. Attribution works by linking every agent action to a downstream business event via our event pipeline. You define which outcomes matter, and OrchStack automatically builds the attribution chain from agent action to business result.

Can I self-host OrchStack Control?

Yes. OrchStack offers a self-hosted deployment option for Enterprise customers. You can run the full OrchStack stack — including Control — on your own infrastructure (AWS, GCP, Azure, or bare-metal Kubernetes). Self-hosted deployments receive the same updates and support as our cloud offering, with full data sovereignty.

ORCHSTACK CONTROL

Govern AI Agents Like Production Software

Manage tenants, roles, guardrails, and costs across your entire agent fleet. Prove ROI with business outcome dashboards — not token counters.

Request Demo View Documentation

Access Control

Enterprise RBAC, Every Level

Role-based access control that maps to how your organization actually works. From org-wide policies down to individual agent permissions.

Hierarchical role-based access control

Permissions cascade from organization to workspace to project to agent level

Custom roles with granular permissions

Define exactly who can build, deploy, view, or manage each resource

SSO / SAML integration

Connect your existing identity provider — Okta, Azure AD, Google Workspace

Organization

OwnerAdmin

Workspace

ManagerMember

Project

EditorViewer

Agent

OperatorRead-only

Governance

Multi-Level Approval Chains

Sensitive actions require multi-level approvals. Configure approval chains, delegation rules, and escalation paths for full governance control.

Multi-level approval workflows

Define sequential or parallel approval chains for deployments, guardrail changes, and budget modifications.

Delegation and escalation

When an approver is unavailable, requests auto-delegate to a backup. Configurable escalation paths with timeout rules.

SLA-based escalation

If approval is not granted within a configurable timeframe, the request escalates to the next level automatically.

Approval Chain — Production Deploy

Agent requests

Deploy to production

pending

Team Lead

Reviews deployment config

approved

Security

Validates guardrails

approved

VP Engineering

Final sign-off

waiting

Security

Complete Data Isolation

Each workspace's data is completely separate. Nothing crosses boundaries — ever. Cryptographic enforcement at every layer.

Per-Tenant Encryption

Each workspace gets its own encryption keys. Data at rest is encrypted with tenant-specific keys that are never shared or reused.

Network-Level Isolation

Tenant data cannot cross workspace boundaries. Row-level security and tenant ID enforcement at the database, API, and SDK layers.

Zero Cross-Contamination

Agent memory, knowledge bases, conversation history, and analytics are all scoped per workspace. No data leaks between tenants — guaranteed.

Compliance

Immutable Audit Trail

Every action logged. Every change tracked. Every compliance officer happy. Real-time activity feed with exportable logs for SOC 2, GDPR, and HIPAA.

Live Activity Feed

Auto-refresh: 5s

Export CSV

Timestamp

User

Action

Resource

Status

2 min ago

sarah.chen

Deployed agentCora / Production

Success

8 min ago

raj.patel

Updated guardrailsBilling Agent / Staging

Success

14 min ago

alex.morgan

Exceeded token budgetSupport Agent / Prod

Warning

23 min ago

maria.garcia

Revoked API keyWorkspace: Engineering

Success

31 min ago

james.wu

Failed deploy attemptOnboarding Agent / Prod

Failed

45 min ago

sarah.chen

Created new agentRetention Agent / Dev

Success

Immutable storageSearchable & filterableExport to CSV / JSONWebhook integrations90-day retention (unlimited on Enterprise)

Cost Dashboard

March 2026

Total Spend

$1,650

12% vs last month

Budget Used

66%

Alerts

Billing Agent near limit

Cora (Booking)$420 / $500

Support Agent$310 / $500

Billing Agent$475 / $500

Retention Agent$190 / $500

Onboarding$255 / $500

Cost Management

Control Spend, Not Tokens

Set budgets, get alerts, auto-pause runaway agents. Know exactly what every agent costs and optimize with intelligent model routing.

Per-agent token budgets

Set hard limits at the agent, project, or workspace level

Alert thresholds & auto-pause

Warn at 80%, auto-pause at 100%. Never wake up to a surprise bill

LLM cost optimization

Intelligent model routing — use the cheapest model that meets quality thresholds

Real-time cost dashboards

Spend by agent, model, workspace, and time period. Export for finance.

The Differentiator

Don't Track Tokens. Track Business Results.

Every other platform shows you token counts and latency charts. OrchStack shows you which agent generated which business outcome. CFO-ready dashboards, not developer metrics.

1,284

+18%

Bookings Created

This month

₹4.1L

+24%

Revenue Attributed

Agent-driven

89.2%

+3.1%

Retention Rate

vs 82% baseline

1.2s

-340ms

Avg Response Time

P95 latency

Agent Attribution Example

Cora generated 234 bookings worth ₹4.1L this month. Top-performing channel: WhatsApp. Average conversion time: 3.2 minutes.

Bookings attributed

Revenue tracked

Channel performance

Deployment

Deploy Anywhere, Rollback Instantly

One-click deploy to any channel. Blue/green deployments for zero-downtime updates. Instant rollback when things go wrong.

One-click multi-channel deploy

Push your agent to Widget, WhatsApp, Slack, Voice, Email, and API simultaneously

Blue/green deployments

Zero-downtime updates with automatic traffic shifting and instant rollback

Environment management

Separate dev, staging, and production environments with promotion workflows

Deploy Channels

Widget

API

Slack

Voice

Environments

Development

6 agentsActive

Staging

4 agentsActive

Production

3 agentsActive

All Features

Everything You Need to Govern at Scale

Enterprise-grade governance built for teams that ship AI agents to production.

Role-Based Access Control

Hierarchical RBAC across organizations, workspaces, projects, and agents with custom roles and granular permissions.

Immutable Audit Logs

Every action logged with who, what, when, and which resource. Exportable for compliance and fully searchable.

Cost Controls

Per-agent token budgets, workspace spending limits, alert thresholds, and auto-pause to prevent runaway costs.

Outcome Dashboards

Track business results, not just tokens. Revenue attribution, booking metrics, and retention rates per agent.

Deployment Manager

One-click deploy to Widget, WhatsApp, Slack, Voice, Email, and API. Blue/green deployments with instant rollback.

Multi-Tenant

Isolate workspaces, data, and billing for different teams, clients, or business units with full tenant management.

Approval Chains

Multi-level approvals for sensitive actions — deployments, guardrail changes, budget modifications. Delegation and escalation paths included.

Agent Marketplace

Browse, clone, and deploy production-tested agent templates. Publish your own agents as reusable templates for the community.

Agent Marketplace

Control includes access to the Agent Marketplace — browse production-tested templates, clone them into your workspace, and deploy in minutes.

Explore Marketplace

Governance & Compliance FAQ

Ready to Govern Your Agent Fleet?

Enterprise-grade control for every agent you deploy.

Request Demo View Documentation

SOC 2 compliant \u00b7 GDPR ready \u00b7 Self-host available