Governance

Give teams freedom. Give IT the controls.

Decide who can build, who can run and who can approve. Trace every run, pause for human decisions, separate teams into workspaces and keep usage inside the limits you set.

Start free Book a demo

Enforced on the serverEvery run tracedScoped API keys

app.cadrixflow.com / roles
Roles and permissions page in Cadrix showing a permissions matrix for the Owner role
What you control

Six controls, one workspace

Governance is part of the product, not an add-on. Each control below is built into the app you already build in.

Roles and permissions

A matrix of who can view, create, update, delete and configure each part of the product.

See the matrix

Run tracing

Open any run and see each step's input and output. Retry or re-run without losing the original.

See a trace

Human approvals

Pause a workflow until the right person responds, then continue where it stopped.

See approvals

Workspaces

Separate teams, data and spend. Each workspace has its own members under one organization.

See workspaces

API keys

Give every integration its own key with only the permissions it needs.

See API keys

Usage and quotas

Track runs, tokens and spend, and cap members, workflows, runs and storage.

See usage
Roles and permissions

Decide exactly who can do what.

Permissions are set per resource and per action, and they are enforced on the server, not just hidden in the menu.

  • Built-in roles: Owner, Member, Guest and Personal Workspace
  • Per-resource actions: view, create, update, delete, duplicate, import, export and configure
  • Custom roles with a permission matrix on the Team and Enterprise plans
  • Duplicate a built-in role to adjust a copy, so shared defaults stay intact
app.cadrixflow.com / roles
Roles and permissions matrix grouping resources into Build, Library and Operate with an allowed or denied checkbox for each action
Audit and run tracing

Every run, every step, on the record.

Open any run to see what each step received and returned, how long it took and whether it succeeded.

  • Step-by-step trace with input, output, status and timing
  • Retry a failed step, or edit and re-run: the original run stays intact
  • Run history kept for 30 days on Starter and without a time limit on paid plans
  • Access history of sign-ins and failed attempts on Enterprise (see below)
app.cadrixflow.com / runs
Run detail showing each workflow step with its type, success status and output
Human approvals

A human in the loop, by design.

Add an approval step wherever a person should decide. The workflow waits, then picks up exactly where it stopped.

  • Approval steps sit on the canvas next to agents, tools and conditions
  • The home screen has a "Needs you" queue for items that want attention
  • The decision and the surrounding steps are part of the run trace
app.cadrixflow.com / home
Cadrix home screen with weekly figures and a Needs you queue
Workspaces and organization

Separate teams, data and spend.

Create a workspace for each team. Each one has its own members and policies, all under one organization.

  • Switch between workspaces from the sidebar
  • Assign each person a role per workspace
  • Workspace policies set guardrails once for the whole workspace
app.cadrixflow.com / workspaces
Workspaces page listing a Personal Workspace and a second team workspace with member counts
API keys

One key per integration, narrowest permissions.

Let your own systems run workflows and read results without sharing a login. Each key carries only the permissions you give it.

  • Create, copy and review keys with their permissions, usage and status
  • See which keys are linked to a workflow and which are unused
  • Call any deployed workflow over HTTP with a bearer key
app.cadrixflow.com / api-keys
API keys page listing a key with its permissions and status, and a curl example for calling a workflow
Usage and quotas

See what runs, what it costs, and where the limit is.

Track executions, tokens, spend and success rate over 7, 30 or 90 days, and set a monthly token cap to be warned before you run out.

  • Daily tokens and estimated spend, API traffic and predictions
  • Monthly token quota with a cap you set
  • Plan limits on members, workflows, runs and storage, shown on the pricing page

Figures in the screenshot come from demo data.

app.cadrixflow.com / usage
Usage dashboard with executions, tokens, spend and success rate tiles, a daily tokens chart and a monthly token quota
By plan

What is included where

Everything above ships on every plan except the items listed under Team and Enterprise. The full limits are on the pricing page.

Every plan

Starter, Pro, Team, Enterprise

  • Run tracing and approvals
  • Workspaces and people
  • Scoped API keys
  • Usage dashboard and system logs

Team and above

Team, Enterprise

  • Custom roles and the permission matrix

Enterprise

Enterprise only

  • Single sign-on
  • Access history of sign-ins and failures
  • On-premises or private cloud deployment
See Enterprise
FAQ

Questions, answered plainly

Permissions are enforced on the server, so a person without access cannot reach a resource by another route. The roles page describes them as enforced on the server, not just hidden in the menu.

Yes, on the Team and Enterprise plans. Starter and Pro use the built-in roles. Built-in roles can be duplicated, and the copy adjusted.

Sign-in events, sign-outs and failed attempts, with the reason for a failure such as an unknown user, incorrect credentials or a disabled user. It is part of the Enterprise plan.

Yes. Each key is created with its own permissions, and the keys page shows which workflows a key is linked to and whether it has been used.

Starter keeps 30 days of run and log history. Pro, Team and Enterprise are not limited by time.

Creating more of that resource is blocked and the app prompts you to upgrade. Limits cover members, workflows, runs per month and storage.

Ship AI your company can stand behind.

Build your first governed workflow on the free plan, or talk to us about roles, SSO and on-premises deployment.

Start free Book a demo