Single sign-on, provisioning, roles, a tamper-evident audit log, data and AI governance, and an API that never acts without a person. The public Trust Center shows the live settings, and the status page shows how the platform is running right now.
SAML 2.0 and OpenID Connect per organization, accounts created on first sign-in, enforce-SSO with a break-glass administrator, and SCIM 2.0 so your identity provider adds and removes people.
View, edit and approve permissions for each buddy, and a Spend Approver role. Media money never moves without a person who holds it.
One append-only log across every buddy. Each event is chained to the one before it with SHA-256, so an edit or a deletion is detectable. Export it to CSV whenever you need it.
Session timeout, two-step verification, IP allowlists, a password policy, and scoped API tokens that expire and are stored only as hashes.
US hosting, client data separated by tenant in every table, retention set per data class, a tracked access and erasure workflow, and a published subprocessor list.
A model registry for every buddy, AI-use disclosure, prompt logging off by default, people approving every AI output, and content credentials on exported creative.
A versioned REST API and an MCP endpoint let other platforms and their AI agents read from the buddies and request safe actions, such as a draft media plan, an agency audit or an AI search readiness score.
Security controls, subprocessors, retention periods, responsible AI rules and a request form for security documentation, published from the live settings.
Open the Trust Center → (opens in a new tab)Database, background jobs, scheduled tasks, backups and media platform adapters, checked every minute by the platform itself.
See live status → (opens in a new tab)Each organization sets its currency and locale, with a dated exchange rate table, and one view across several brands.
The same controls cover every buddy, so adding Media Buddy, Measure Buddy or Search Buddy does not add a new review.
Give it the goal. Get the campaign. A person still presses send.