What is SOXAgent?+
SOXAgent is a financial governance layer for AI agents. Before an agent refunds, pays, approves, or commits spend, SOXAgent evaluates policy, checks approvals and SoD rules, records evidence, and helps teams monitor control health over time.
Who is SOXAgent for?+
Engineering, finance, audit, and controls teams building or governing AI-driven financial workflows. It is especially useful for teams that want agents to move faster without losing control over approvals, monitoring, evidence, and auditability.
What kinds of actions can SOXAgent govern?+
Financial and finance-adjacent actions such as refunds, reimbursements, journal entries, payment releases, vendor changes, contract commitments, credits, and similar approval-sensitive workflows.
How does SOXAgent work with AI agents?+
An agent submits a request before taking an action. SOXAgent evaluates the request against policies, approvals, SoD rules, and evidence requirements, then returns a result such as approve, review, or deny. It also records the outcome so teams can monitor how controls are performing over time.
What’s the difference between TEST and LIVE?+
TEST is a sandbox for validating policies, approvals, evidence, SoD behavior, and control monitoring safely. LIVE is for real production governance. They behave like separate workspaces inside the same organization.
What’s the difference between sk_test_ and sk_live_ keys?+
sk_test_ keys operate only in TEST. sk_live_ keys operate only in LIVE. This keeps sandbox activity completely separate from production activity.
Can I test policies and approvals before going live?+
Yes. You can use TEST keys and the TEST workspace to create agents, policies, approvals, evidence, and SoD scenarios before enabling the same flow in LIVE.
Does TEST activity stay isolated from LIVE?+
Yes. TEST and LIVE are environment-isolated. Test requests, evidence, dashboard data, policy execution, and control-monitoring signals stay separate from production governance activity.
What happens when a request matches multiple policies?+
SOXAgent resolves overlap automatically. The most restrictive outcome wins first, then more specific rules win over broader ones, and if needed a deterministic tiebreaker is applied. You do not need to manage numeric priority values manually.
How does SOXAgent handle human approvals?+
If a request requires review, SOXAgent routes it for human approval instead of auto-approving it. The approval decision becomes part of the evidence trail and can be inspected later along with the rest of the request history.
Does SOXAgent support segregation of duties (SoD)?+
Yes. SOXAgent supports SoD role assignments, conflict detection, dashboard visibility, and evidence output for SoD-relevant actions.
Can SOXAgent block an approval because of an SoD conflict?+
Yes. SOXAgent can block approvals when configured SoD rules say the approver is performing an incompatible duty combination.
What evidence does SOXAgent generate?+
Structured evidence for governed actions, including policy snapshots, event history, approvals, decision reasoning, integrity checks, and other audit-relevant artifacts tied to the request lifecycle.
Can I export evidence packs?+
Yes. SOXAgent can export evidence packs for governed actions so teams can review, retain, and share audit-ready records.
How does SOXAgent help with SOX 404?+
SOXAgent helps teams enforce, evidence, and monitor financial-control workflows under SOX 404 — specifically authorization controls, segregation of duties, and evidence preservation for AI-driven financial actions.
Is SOXAgent only for SOX 404 right now?+
SOXAgent is currently SOX 404-first. The product experience is focused on governing AI-driven financial actions with strong approval, evidence, monitoring, and SoD controls around that model.
Do humans create transactions in the dashboard?+
SOXAgent is primarily a control plane where systems and agents submit requests. Humans configure controls, approve exceptions, monitor control health, review evidence, and investigate outcomes rather than manually entering production transactions.
Does SOXAgent replace my ERP or finance system?+
No. SOXAgent sits in front of important actions and helps govern whether those actions should proceed, under what conditions, with what evidence, and with what ongoing control visibility. It does not replace your financial system of record.
How long does it take to get started?+
Teams can usually get started quickly by creating a key, registering an agent, defining a small policy ladder, and submitting a first test request in TEST mode before moving to LIVE.
Do I need a separate account or org for testing?+
No. TEST and LIVE work as separate environments inside the same organization, so you can validate workflows in TEST without creating a second org just to experiment.