What Mandate reads, and what it keeps.

Mandate reads each message to apply your rules, and keeps a signed record of the decision.

Check a sample record For your security review

One decision, as it is recorded

Decision
Refused
Who
s.patel
Tool
ChatGPT
When
19 Oct 2026, 5:58 p.m.
Rule
Contains a Canadian social insurance number
What it found
Social insurance number
Message text
Not kept

From the Clearfield sample record, unchanged since it was signed.

How your records are protected

Your own workspace

Everything you give Mandate sits in a workspace of your own, and an export holds only your records. Your organization controls them, and Mandate handles them on your behalf.

Changes are caught

Mandate signs the record as decisions come in, so anyone can tell if it was changed after signing.

Where your records are held

Our hosted service checks messages and holds records in Canada, and Mandate does not move them without your written agreement. The EU and the UK recognize Canada’s privacy law for businesses as adequate for personal data sent from them. On your own servers they stay where your servers are.

Your own copy

Your security monitoring receives each decision as it happens, with its SHA-256 hash from the signed record, so a record changed later no longer matches your own copy.

What Mandate keeps

On the record

  • Who, or which agent
  • Which AI tool, and when
  • The rule that applied and what it did
  • The kind of detail found, such as a passport number
  • A SHA-256 hash of the request, which matches the exact request but holds none of its text

Not kept

  • What people type, upload or get back on AI websites
  • A held message’s text, once someone decides it, and never past 24 hours
  • Text from your own software, AI agents and the AI logs Mandate copies, unless you turn that on, for the period you set

  • Every change recorded

    Who changed which rule or setting, and when, goes on the record, Mandate’s support included. If Mandate’s support opens text you chose to keep, the people you name for alerts get an email.

  • Checked inside Mandate, never used for training

    Every check runs inside Mandate, so no message goes to another company to be checked. Mandate never uses your messages or records to train any AI model, its own or anyone else’s.

  • A privacy request

    Export one person’s records when they ask, or erase their AI use from the record. The record still shows that the erasure happened, and it still passes the check. Copies in backups are gone within 30 days.

  • How long records are kept

    Two years and 30 days, so each year’s records outlast that year’s audit. You can choose any period from 30 days to 10 years. When a subscription ends, for any reason, ask within 30 days and we send you a signed export of all your records. They are deleted within the 30 days after that, and copies in backups within a further 30 days.

  • Telling your staff

    Our free AI acceptable use policy template includes a notice that tells staff their AI use is recorded.

For your security review

  • Data processing agreement

    The terms for how Mandate handles your information, with the service providers involved. Ask for it at contact@mandateco.ca.

  • Security questionnaire answers

    Our answers to the Cloud Security Alliance’s CAIQ questions, shared under a mutual NDA, and we fill in your own questionnaire too. Ask for them at contact@mandateco.ca.

  • The certificate IT installs

    Made for your organization, it lets Mandate read what your computers send to and receive from the AI websites it checks, and no other website. IT can read that list in the certificate itself. IT downloads it from your own Mandate account, and Mandate never sends a certificate by email or asks for one to be installed over the phone.

  • Requests from authorities

    If an authority asks Mandate for your information, we tell you unless the law forbids it and challenge a request we believe is unlawful. We hand over only what the law compels.

  • Incident notice

    If a security incident affects your information in Mandate, your administrators hear from us without undue delay, and within 72 hours of when we become aware of it.

  • Reporting a vulnerability

    Write to security@mandateco.ca. We acknowledge every report within three business days and do not pursue legal action against good-faith reporters.

  • Check a sample record

    Check a sample record in your browser, and read the code that runs the check.

Next: Pricing$10 CAD a person a month, or $8 USD outside Canada, with the first 30 days free.