Agent identities

AI agents are first-class identities in Trinitis. Register each agent, govern it with the same policies as people, and get alerted when it touches sensitive data.

Register an agent

Add the agent on the AI Agents page and bind it to the identity it uses on each connection — a service account or a dedicated platform identity. Agents are never metered on any plan.

Govern agents with policies

Choose a registered agent as the actor in any policy rule. The rule is enforced on every connection where the agent has a governed identity. If it has none on a connection, the policy editor warns you and marks the rule as not enforcing there — nothing is silently skipped.

Agent alerts

Send alerts to a Slack webhook, email, or both when an agent:

  • is denied access, or
  • successfully reads data tagged PII, Financial or PHI.

Repeat alerts for the same agent and alert type are suppressed for 30 minutes.