The Governance Layer That Existing
Security Tools Don't Cover
CyberArk governs credentials. SailPoint governs identity. HashiCorp governs secrets. These tools address different layers from a release decision. CAM governs sensitive data access and actions requested by AI agents or people. At least M of N named human approvers must approve, no approver may deny, and the configured veto window must pass before CAM sends one signed call to the customer's system. That system releases data or executes the action. CAM does not execute actions or store governed data and records each decision in a tamper-evident, hash-chained audit log.
Why CAM Protocol Exists
Average US enterprise breach cost
IBM Cost of Data Breach Report 2025
Of enterprises have adequate AI agent governance
Gartner 2025
Global cybercrime cost in 2025
Cybersecurity Ventures Official Cybercrime Report 2025
Of AI-related breaches had no AI access controls
IBM Cost of Data Breach Report 2025
Review the controls in your stack.
CAM adds human approval for sensitive data access and actions.
CAM governs sensitive data access and actions requested by AI agents or people. At least M of N named human approvers must approve, any denial permanently vetoes the request, and the configured veto window must pass before CAM sends one signed call to the customer's system, which releases data or executes the action. CAM does not execute actions or store governed data.
Network Security
Palo Alto · Zscaler · Cloudflare
Identity & SSO
Okta · Microsoft Entra · Ping Identity
Identity Governance
SailPoint · Saviynt · One Identity
Privileged Access (PAM)
CyberArk · BeyondTrust · Delinea
Secrets Management
HashiCorp Vault · AWS Secrets · Azure Key Vault
Endpoint / XDR
CrowdStrike · SentinelOne · Microsoft Defender
SIEM & Detection
Splunk · Microsoft Sentinel · IBM QRadar
Data Loss Prevention
Microsoft Purview · Forcepoint · Symantec DLP
Cloud Security Posture
Wiz · Prisma Cloud · Orca Security
AI Agent Request Governance
No dedicated release approval workflow shown
Human Approval for Sensitive Data and Actions
AI Agent Data and Action Requests
CAM governs sensitive data access and actions requested by AI agents or people. At least M of N named human approvers must approve, any denial permanently vetoes the request, and the configured veto window must pass before CAM sends one signed call to the customer's system, which releases data or executes the action.
M-of-N Human Approval
At least M of N named human approvers must approve a sensitive data access or action request. The configured threshold determines the required number.
Built-In Denial Veto
Any denial permanently vetoes the request, regardless of the approval count. A vetoed request cannot proceed to release.
Requests from AI Agents and People
AI agents or people can request sensitive data access or actions. After approvals, no denial, and passage of the configured veto window, CAM sends one signed call to the customer's system, which handles the release or action.
Signed Call to Customer System
After at least M of N named human approvers approve, no denial, and passage of the configured veto window, CAM sends one signed call to the customer's system. That system releases data or executes the action. CAM does not execute actions or store governed data.
Tamper-Evident Audit Log
CAM records each decision in a tamper-evident, SHA-256 hash-chained audit log.
CAM Protocol vs. Leading Security Platforms
CAM governs sensitive data access and actions requested by AI agents or people. At least M of N named human approvers must approve, any denial permanently vetoes the request, and the configured veto window must pass before CAM sends one signed call to the customer's system, which releases data or executes the action.
| Capability | CAM Protocol | CyberArk | SailPoint | BeyondTrust | HashiCorp | Okta |
|---|---|---|---|---|---|---|
| Primary Purpose | Sensitive data access and action requests with named human approval | Privileged credential mgmt | Identity lifecycle mgmt | Endpoint privilege control | Secrets management | Identity & SSO |
| Release Authorization | At least M of N named human approvers; any denial permanently vetoes | Yes: one admin credential grants privileged access | Yes: single workflow approver can grant access | Yes: single approver controls privilege escalation | Yes: stolen token grants full secret access, no human gate | Yes: one compromised identity reaches all SSO-connected systems |
| AI Agent Data Access and Action Requests | Requests routed to named human approvers | None | None | None | None | None |
| Named Human Approval Threshold | At least M of N named human approvers | Single approver | Sequential workflow | Single approver | None (token-based) | None |
| Denial / Veto Rights | Any denial permanently vetoes the request | None | None | None | None | None |
| Configured Veto Window | Window must pass before signed call | Session-based | Role expiration | Session-based | Token TTL | Session-based |
| Signed Call to Customer System | One signed call after approval and veto window | No | No | No | No | No |
| Governed Data Not Stored by CAM | Customer system handles requests; CAM stores no governed data | Identity/credentials only | Identity/roles only | Endpoint/credentials only | Secrets only | Identity only |
| Tamper-Evident Decision Log | Each decision recorded in a tamper-evident, SHA-256 hash-chained log | Session/credential logs | Role change logs | Session logs | Audit log | System log |
| Healthcare Data Release Requests | M-of-N human approval; any denial vetoes; window must pass | Via configuration | Via configuration | Via configuration | Via configuration | Via configuration |
Competitive data based on publicly available documentation. CAM governs requests for sensitive data access and actions through named human approval.
How CAM Is Built
Website data protection
The website is served over HTTPS/TLS. Encryption at rest for the contact database is managed by the infrastructure provider. See our trust page for the current data-handling details.
Purpose Limitation
CAM processes governance metadata and records each decision in a tamper-evident, SHA-256 hash-chained audit log. CAM does not store the governed data.
Signed Call to Customer System
At least M of N named human approvers must approve, no approver may deny, and the configured veto window must pass. CAM then sends one signed call to the customer's system, which releases data or executes the action. CAM does not execute actions or store governed data.
See what is in place today and what remains on our roadmap.
Trust and data handlingReady to Integrate CAM Into Your Stack?
Priority onboarding for healthcare, financial services, and AI infrastructure teams.