Togii is an AI control and governance layer developed for legal and regulated sector organizations seeking independently verifiable oversight of AI use across their technology environments. The product is a brand of Edgeworks Ventures Ltd., registered in England and Wales.
Key features and functions include:
Pre-Processing Data Protection
Before information is submitted to an external AI model, Togii identifies sensitive content and substitutes it with cryptographically protected placeholders. External models receive the context required to perform a task while original data remains within the organization's controlled environment. Upon return of the model response, authorized information is restored.
Cryptographically Signed Audit Chain
Each AI interaction generates a verifiable record across twelve defined processing steps. Records are cryptographically signed using Ed25519 keys and hash-chained such that any modification to the chain is independently detectable. Artifact verification does not require access to Togii infrastructure.
Open-Source Verification Toolkit
Togii publishes an open-source toolkit enabling an organization's security team or external auditor to independently verify the signature chain, hash integrity, and regional enforcement without vendor involvement.
Multi-Provider AI Routing
Togii supports routing to multiple external AI model providers rather than a single vendor. This is intended to reduce model and vendor lock-in and allow organizations to manage new vendor AI features or model changes through a consistent governance layer.
Deployment Tiers
Two deployment options are available. The Silver tier operates on Togii-managed infrastructure with customer-specified deployment regions and per-tenant cryptographic key separation. The Gold tier deploys to the customer's own cloud account or on-premises environment. Both tiers produce the same artifact chain format.
Key Ownership Models
The product offers three key ownership configurations: individual or consumer-level, in which end users hold their own encryption keys; business owner, in which the organization holds master keys with delegated employee access; and enterprise IT-managed, integrated with standard identity and access management systems.
Loading...