Governance Controls — On by Default
Unlike platforms that treat security as an add-on, Songlines Control® ships with all critical governance controls enabled out of the box. Administrators can configure, not compromise.
Core Security Architecture
Sovereign Infrastructure
All data processed through our managed SaaS platform remains entirely within Australia. No offshore routing, processing, or storage — guaranteed.
Zero-Trust Architecture
Every request is authenticated, authorised, and evaluated against enterprise policy before execution. Least-privilege access enforced at every layer. Upstream AI provider requests are protected by a strict header allowlist — only safe, explicitly approved headers are forwarded. Internal metadata, cookies, and custom headers are stripped at the gateway.
Immutable Audit Trail
All records are cryptographically signed using SHA-256 and HMAC. Records cannot be modified or deleted — providing tamper-evident logs for regulatory submissions.
PII Auto-Redaction
PII, PHI, and sensitive corporate data are automatically detected and redacted at the edge. Sensitive information never reaches external AI models.
Role-Based Access Control
Granular RBAC with per-user AI spend attribution. Admins, users, and service accounts each have precisely scoped permissions — nothing more.
Flexible Deployment
Deploy as Managed SaaS (Australian region), Private Cloud / VPC, or fully air-gapped on-premise. The same control plane, any environment.
Header Allowlisting
Only explicitly approved headers (content-type, authorization, accept, user-agent, x-request-id) are forwarded to upstream AI providers. All other headers — including cookies, internal routing metadata, and custom headers — are stripped at the gateway layer before any external request is made.
Session Hardening
Session tokens expire after 30 days with automatic re-authentication required. Cookies are signed with HMAC-SHA256, scoped to the application domain, and set with HttpOnly, Secure, and SameSite=Lax attributes.
Tenant Isolation
All data queries are scoped by both user identity and organisation ID. API keys, telemetry events, policy rules, and audit logs are isolated at the database layer — preventing cross-tenant data leakage even in multi-organisation deployments.
Immutable Audit & Compliance Log
Every AI interaction — request, model selection, policy decision, token count, cost, and outcome — is recorded in a tamper-evident log. The audit trail is ISO 27001 aligned and audit-ready for Australian government compliance requirements.
Recent Security Hardening
In July 2026, Songlines Control® underwent a comprehensive security review. The following enhancements were implemented:
| Control | Description |
|---|---|
| SSRF Prevention | Removed arbitrary upstream URL routing. Only 5 allowlisted AI providers are accepted. |
| Endpoint Authentication | All scheduled and internal endpoints now require valid session authentication. |
| Org Enumeration Prevention | Public-facing portal URLs use randomised organisation slugs instead of sequential numeric IDs. |
| Session Duration | Default session lifetime reduced from 12 months to 30 days with mandatory re-authentication. |
| Header Allowlist | Gateway proxy forwards only 5 explicitly approved headers to upstream providers. |
| Tenant Isolation | API keys and data queries enforce dual-scope filtering (userId + orgId) at the database layer. |
These controls were verified through internal penetration testing and code review. No critical vulnerabilities were identified.
Compliance & Regulatory Alignment
Songlines Control® is designed to support compliance across the frameworks that matter most to Australian enterprise and government organisations.
-
ISO 27001
Our Information Security Management System is aligned with ISO 27001 standards. Security controls are embedded in the product architecture, not bolted on.
-
Audit-Ready
Our architecture is designed to meet the Australian Government Information Security Manual (ISM) controls required for compliance assessment — making Songlines Control® suitable for government deployments.
-
ISO 42001
Aligned with the international standard for AI Management Systems — providing a governance framework for responsible AI deployment at enterprise scale.
-
Essential Eight
We implement the ACSC Essential Eight maturity model across our corporate and production environments, including application control, patching, and multi-factor authentication.
-
Privacy Act
Songlines Control® supports compliance with the Australian Privacy Act 1988, including data residency controls, PII redaction, and access audit trails.
-
APS AI Policy 2024
Designed to support the updated Australian Public Service AI use policy (2024), including mandatory Shadow AI disclosure, human oversight requirements, and algorithmic transparency obligations.
-
AASB S2
Songlines Control® includes automated AI emissions reporting aligned with AASB S2 mandatory climate disclosure requirements — including Scope 3 compute emissions, board-ready reporting, and Director Liability Assessment.
Vulnerability Disclosure
We welcome responsible disclosure from the security community. If you believe you have discovered a security vulnerability in our platform, please contact our security team at security@cetusai.com.au. We will acknowledge receipt within 24 hours and respond with a remediation timeline within 72 hours.