Source CharterGovernance control planeFor organisations bringing AI to company documents
Source Charter sits between your documents and your AI assistant. Decide which sections it can use, which require clearance and which are never used by AI, without splitting or rewriting a thing. Every answer and refusal is kept on record, and exports as sealed evidence for the EU AI Act, DORA and ISO/IEC 42001.
Works with Microsoft 365 Copilot through Copilot Studio · Dify
Sarah and Marcus ask the AI about the company’s payment approval rules, which are confidential. Only Marcus is allowed to see them. Both questions go into the audit trail, and you can download either record below.
Illustrative example using fictional company documents.
FIN-BP01 is the company’s payment approval matrix Confidential
SarahNot allowed to see the payment rules
AI assistantWhat does FIN-BP01 say?
Refused by Source Charter
No authorised information was found to answer this question.
1 confidential section withheld
Refused before the AI was involved. The AI was never shown the rules.
MarcusAllowed to see the payment rules
AI assistantWhat does FIN-BP01 say?
FIN-BP01 says every outgoing claim payment requires two-stage authorisation by different individuals.
Payments up to €20,000 may be released by any two accredited payment officers. …(shortened: two of the answer’s seven sentences; the full answer is in his record)
Source: FIN-BP01 Payment Approval Matrix
Answered from the confidential section he is cleared to see, with its source.
Plus the refusal and why: FIN-BP01 is confidential, so its section was withheld before any model was called.
SHA-256 of evidence.json inside the sealed pack, also recorded in its seal.json. Recompute it to check the record hasn’t changed:
05eb0acb35193f22fd05cabf3bc2b5fed524ff6b3b119c97587a97988d8c248a
Plus the full answer, the model that wrote it, and the section it cited.
SHA-256 of evidence.json inside the sealed pack, also recorded in its seal.json. Recompute it to check the record hasn’t changed:
4e77fb9e3de4c8e7c7b5ea70affb6b474542d883986c9b1659ea9e50d9da463e
What it adds
File permissions decide who can open a document. Source Charter decides which sections of it an AI assistant may use, and for whom: access control for retrieval-augmented generation (RAG), alongside your existing controls and without reorganising your original documents.
Make useful sections available to AI while restricting or excluding sensitive content in the same document. Your original files stay intact.
Sections go live only once approved, through review or, for a trusted public source, a policy your administrator switches on. Bank and card numbers and credentials are flagged first.
Confirm earlier decisions for unchanged sections in one step, and review what changed. If something slips through, find every answer that used it and stop it being used again.
Every answer and refusal is kept with its sources and the decisions behind it, exportable as a sealed evidence pack built for DORA and EU AI Act evidence.
How it works
01 / Review
Review each section beside its source and classify it as Public, Internal, Restricted or Do Not Index. An administrator can approve the document version once every section has a decision.
claims-payment-operations-manual.pdfv1
✓ ExtractReviewLineageApprove7 / 10 reviewed
Sections 3 selected
AllPendingApprovedRejected
33 sections still need review
02 / Publish
Approval alone doesn’t make anything live. Publish an approved version to make its eligible sections available to connected AI assistants. Public, Internal and Restricted sections follow their access rules, and Do Not Index sections stay out of retrieval.
39 sections
03 / Update
A new version offers the earlier decision for every unchanged section, for a person to confirm. Changed sections get a fresh review, and the old version is superseded once the new one is published.
claims-handling-policy-v2.pdf
6 sections still need review
Showing 4 of 6 sections
Your questions
Plain answers to what CIOs ask us before anything is connected.
It provides records to support your compliance work; no product makes you compliant on its own. Every answer and refusal is kept with its sources and the decisions behind it, annotated for the EU AI Act, DORA and ISO/IEC 42001.
No, your files stay as they are. Decisions are made section by section inside Source Charter. Bring them in the formats you already use: PDF, Word, web pages, etc.
Yes, through Copilot Studio and Dify. It also works with other major AI assistants, so you don’t need a new one.
Yes, section by section. Any section can be kept from AI entirely, and confidential ones reach only people cleared for them. Clearance is checked on every question (per signed-in person with Microsoft 365 Copilot, per connection with Dify), and withheld sections are never passed to the AI.
Yes, only sections approved as Public. Outside users, such as visitors to a public chatbot, get a public-only access level, so internal and confidential sections never reach it. Every answer is still kept on record.
Self-hosted, or hosted by TryCatch for your pilot. Search runs inside that environment. By default the answers are written by a hosted model; you can run your own instead.
Document review, connection and testing. Someone who knows the documents reviews them section by section, helped by suggestions and detectors; we estimate that effort with you before the pilot. We set Source Charter up, you connect your AI assistant, and we run your pilot questions and show you how it performed.
A pilot starts small on purpose: one set of documents, one AI assistant and a few people testing it.
Something people ask about every day, like a policy manual or a procedures guide.
Someone who knows the content goes through it part by part. Sensitive details are flagged for them as they go.
We set Source Charter up for you. You connect your AI assistant, such as Microsoft 365 Copilot or Dify, and a few colleagues start trying it out with their own questions.
We run the questions you agreed in advance and show you how it performed: what it answered, what was refused and why, and how much review it took, so you can decide whether to go further.
Next step
See how Source Charter decides what your AI can use, on our demo documents. We can also show it on your own documents, once we’ve agreed how they’ll be shared and handled.
What happens next