Zero Leakage
Inbound orders are intercepted, cross-verified against live ERP inventory states, and authorized before checkout finishes.
The deterministic control plane that governs your checkout inline — blocking price drift, runaway coupon stacking, and rogue agent actions in <120ms. Start on Shopify; extend the same policy graph across your ERP and autonomous ops.
Run it instantly in the sandbox, or start Shadow Mode free and read-only on your own data — enforcement auto-provisions in one click when the drift is real.
margin floor breach · suppressed before checkout token issued
Six deterministic outcomes, measured at the point of sale — before money moves or state changes.
Inbound orders are intercepted, cross-verified against live ERP inventory states, and authorized before checkout finishes.
Hard mathematical margin floors instantly block 'hallucinated' coupon stacking and runaway automation loops at the point of sale.
Decionis is live on Shopify today — your proven, 100+-install surface — and runs the same deterministic policy graph across SAP and your ERP through one common native-surface contract. Each surface is a concrete implementation, not a second control plane.
Margin floors enforced inside Shopify Functions and Flow at the checkout edge. Self-serve from the App Store.
Margin and promo-hygiene guardrails for your eBay Sell-API listings, orders, and promotions — eBay OAuth connect, production-validated against a live seller account.
A blocked discount and a reclaimed margin point are outcomes. They hold only because of what runs underneath: a control plane that decides before the checkout token is issued, not an alert after the loss.
Three primitives compose that certainty — a deterministic verdict, two gates that enforce it, and a signed record that proves it. Together they make execution at machine speed safe enough for finance to authorize.
Every high-stakes intent resolves to one deterministic verdict — Authorize, Block, Escalate, or Restrain — at the millisecond of execution. Same inputs, same verdict, every time. No model, no probability, no drift.
Decision records, dossiers, and evidence-bearing execution events
Infrastructure metrics, not vanity metrics.
Decionis tracks decision quality, prevented loss, approval velocity, and generated proof.
Every certified action can leave behind a signed Decision Dossier.
Real teams put governed decisions in their execution path with Decionis. These are verifiable onboarding proofs — how fast a partner reached a live, signed decision contract. The economic side of the story is accounted for separately, and honestly, on the prevented-loss methodology.
Enilo went live with Decionis as the governance layer around its eligibility signals — registering, uploading a sample feed, confirming the inferred mapping, and issuing production credentials in less than a day, on a standard versioned-policy contract rather than a services engagement.
Checkout margin protection is live in production today. And the same gate that blocks a bad checkout is a deterministic decision layer for any high-stakes action: one Universal Action Gate governs vendor deals, visa applications, and code deploys with the same signed verdict — no native integration required.
Decionis is an inline, deterministic control plane that decides whether a high-stakes action is safe before it executes. In commerce it stops coupon-stacking, price-drift, and rogue-agent margin leakage and prevents multi-channel over-selling at checkout in under 120ms; the same control plane governs payments, ERP updates, ITSM changes, and AI-agent actions. It returns a proceed, hold, block, or escalate verdict and packages the proof into a signed Decision Dossier that links into a Decision Chain and Decision Ledger.
Decionis enforces a hard, cost-basis-aware margin floor inline at checkout. When stacked or unauthorized discounts would push an order below the floor, the order is blocked before the checkout token is issued — in under 120ms — and the decision is recorded as a signed Decision Dossier. Unlike native Shopify discount rules, it computes net margin against a verified cost basis and fails closed.
Decionis validates live inventory at the millisecond of checkout and halts double-sales before the order commits, so the same last unit cannot sell on two channels at once. This protects marketplace seller ratings — for example, keeping eBay out-of-stock cancellations below the Top Rated Seller defect threshold.
A margin floor is a hard, deterministic minimum-profit rule enforced inline at the point of sale. Decionis intercepts each order, computes net margin against your live cost basis, and blocks or restrains any order that breaches the floor in under 120ms — then signs a tamper-evident Decision Dossier as proof.
Install read-only, let Shadow Mode run on your recent orders, and read a Drift Report built from your own data. If the number is real, enabling enforcement is one click.
Read-only · no checkout changes · reversible per rule
Turn slow, manual back-office fraud and margin reviews into instant, deterministic, cryptographically signed approvals.
Recover the silent losses from tools editing prices outside guardrails — and every block lands a signed, audit-ready dossier, so audit teams skip weeks of prep.
Multi-channel inventory lag lets the same last item sell on Shopify and eBay at once — and the resulting cancellations wreck your seller rating. Decionis validates live inventory at the millisecond of checkout and halts double-sales before the order commits, insulating your Top Rated Seller status.
Shopify Functions and Flow today, with Slack, ServiceNow, SAP, and your ERP governed by the same policy graph. New surfaces plug into one common contract — not a second control plane.
Vendor payments, purchase orders, and procurement approvals governed before they execute in SAP — the dual-gate control plane on your ERP.
Margin and pricing guardrails for your Amazon SP-API listings and orders — Login with Amazon connect, shadow-mode first while we validate against live seller accounts.
Cross-verify cost basis and inventory against your system of record via standard webhooks — the same Gate 1 admission check, any backend.
Payroll runs, expense payouts, and supplier invoices circuit-broken before they commit, and HR business processes (terminations, compensation changes, hires) checked for authority, segregation of duties, and pay equity — dual-gate packs built and tested, pending validation against a live Workday tenant.
Synchronous margin-floor enforcement at BigCommerce checkout (headless / Open Checkout) plus promo-hygiene on carts and promotions — OAuth app install, fail-open by design, pending validation against a live store.
Synchronous checkout-webhook enforcement for Adobe Commerce / Magento — halts a margin-breaching order (op:exception) or lets it through, failing open on any engine error. Cost basis read from Magento's product cost; pending validation against a live store.
Pre-execution Action Gate for Salesforce — Flow, Apex, and Agentforce actions checked before they run (allow / hold / escalate) with signed Decision Dossiers on the record. Managed package, shadow-first rollout; AppExchange Security Review in progress.
Live today: Shopify, eBay, SAP, ERP & Webhooks. In beta: Amazon, Workday, BigCommerce, Adobe Commerce, Salesforce.
Gate 1 (State Admission) verifies the premise against your live ERP system of record, so nothing executes on ghost data. Gate 2 (Execution Authority) issues a hard runtime block the instant an action breaches your encoded margin floor. Fail-closed: if it cannot prove safe, it does not pass.
Each Authorize, Block, or Escalate is anchored in an immutable, Ed25519-signed dossier — chained so it is tamper-evident and verifiable without an account. The result is a mathematically certain, audit-ready trail for every real-time state change.
CoolDeal completed the entire Decionis onboarding for its Resolve pillar from the public API docs alone — sponsor verification, mapping, sample upload, deployment-bundle issuance, and callback registration — with no dashboard handoff or custom operator path.
See exactly how we account for the margin loss Decionis prevents — computed from live governed decisions, never a fabricated number — and model your own payback.
Yes. The Decionis sandbox generates a real, signed Decision Dossier from a scenario of your choice in your browser with no account. Decionis is self-serve: install read-only Shadow Mode on your own store first, then turn on enforcement in one click — no demo required.
The Decionis authority lifecycle is Decision Dossier, Decision Chain, Decision Ledger, Override Dossier, Policy Drift, and Policy Evolution. It turns one certified verdict into durable institutional memory instead of leaving critical decisions scattered across logs, tickets, and screenshots.
Decionis treats overrides as controlled evidence. The original Decision Dossier remains intact, the exception is linked as an Override Dossier, and override patterns become Policy Drift signals that inform governed policy evolution.
Choose Decionis when your team needs confidence before a high-stakes action happens, not only documentation after the fact. ServiceNow IRM and IBM OpenPages are broader GRC platforms, while Decionis is optimized to sit in the execution path and return one signed recommendation before money moves or system state changes.
Decionis is a specialized execution control plane, not a full replacement for enterprise GRC suites. ServiceNow IRM and IBM OpenPages are broader for program management, control administration, and enterprise risk workflows, while Decionis is narrower and stronger at deterministic pre-execution enforcement with signed audit artifacts.
Guardrails AI, Lakera, and LangChain Guardrails focus on LLM safety, prompt controls, runtime protections, or agent behavior. Decionis operates one layer closer to business execution: it evaluates institutional policy against intent and signals, then decides whether a real-world action can proceed.
Yes. Public trust signals include Microsoft ISV Partner status, NVIDIA Inception participation, public docs and quickstart flows, security and governance materials, signed Decision Dossier verification, validation packs, and org-wide and per-decision kill switches.
Decionis fits as a thin Vertex AI Extension or ADK tool surface that forwards agent intent into Decionis Protocol for the actual governed decision. Google Cloud and Vertex AI stay in the intelligence and distribution layer while Decionis preserves deterministic policy checks, human approval, kill switches, and audit-grade Decision Dossiers.
Yes. Teams and Power Automate can remain workflow surfaces while Google Cloud and Vertex AI handle intelligence. Decionis stays in the execution path, returns one certified verdict, and keeps the Decision Dossier, validation pack, and approval proof model intact across both surfaces.
Decionis can sit across Slack, Microsoft Teams, Power Automate, Salesforce, ServiceNow, Google Cloud, Vertex AI, Jira, ERP systems, and API or webhook-driven enterprise workflows while keeping one policy boundary before execution.
Yes. Decionis supports autonomous execution with policy gates, while still blocking, escalating, or restraining gray-zone decisions and exposing kill switches when teams need to halt execution immediately.
Decionis is live in production. On commerce it is on the Shopify App Store with 100+ installs governing thousands of checkout gates. Two named design partners have published case studies: Enilo, an AI-assisted global mobility platform, went live in under a day using zero-config onboarding; and CoolDeal, an agentic deal-recovery product, completed onboarding from the public API docs alone with no operator handoff. These are verifiable onboarding-speed proofs — Decionis does not attribute a fabricated margin percentage to any customer.
Decionis reports a Governed Execution Value figure — the monetary value of the actions it evaluated before execution, including the value of blocked or restrained actions — computed from live governed decisions. The figure is gated: when the trailing-window sample is below a public-render threshold, the site shows an early-seed-cohort status instead of a number, so the prevented-loss figure is never fabricated. The full accounting method is published on the prevented-loss methodology page, and any team can model its own payback in the ROI calculator.
Decionis governs commerce and workflow surfaces including Shopify (live), eBay (live), SAP (live), Amazon, BigCommerce, Adobe Commerce, Shopware, Walmart, TikTok Shop, plus Slack, Microsoft Teams, ServiceNow, Salesforce, and GitHub — the full consolidated catalog with per-connector readiness and onboarding effort is on the integrations page. For ERP and systems of record, SAP is live and any backend — including NetSuite, Dynamics, and custom ERPs — is supported today through the ERP & webhooks path, which cross-verifies cost basis and inventory. A deeper native NetSuite connector is on the roadmap.
Checkout margin protection is where Decionis runs live in production today — and it is not the limit. The same deterministic gate — the Universal Action Gate — governs any point of execution through a single API or webhook call, with no native integration required. Beyond checkout, it applies to vendor deals and procurement commitments, visa and eligibility submissions, and code deploys or infrastructure changes (for example, blocking a hard policy violation before a config change applies). Related verdicts link into a multi-workflow Decision Chain for cross-domain accountability. Checkout is live today; the other domains are deployable policy patterns on the same gate.
Decionis publishes the review path so security teams can evaluate it before a diligence cycle: the Trust Center states certification posture plainly (SOC 2 and GDPR formalization in progress, ISO 27001 planned, EU AI Act Art. 12 mapped); the Governance Controls page documents the Governor Layer — maker–checker policy approval, RBAC, OIDC/SAML SSO, signed audit trail, and kill switches; the Governor Playbook walks the lifecycle step by step with the SOC 2 / ISO 27001 control each step produces evidence for; and the sandbox generates a real Ed25519-signed Decision Dossier a reviewer can verify without an account. Nothing in Decionis requires enforcement authority to start: Shadow Mode is read-only.
Policy in Decionis is versioned and promoted through a maker–checker path: a material change is an explicit new version with its author, approval path, and effective window preserved, so a change can be proven to have followed the approved path (SOC 2 CC8.1) rather than edited in place. Access is role-based (RBAC) with OIDC/SAML SSO, AI reasoning is separated from execution, and every verdict is an Ed25519-signed Decision Dossier. Decionis is not a full GRC suite by design — it is the deterministic gate that produces signed evidence your existing GRC program (RSA Archer, OneTrust, ServiceNow GRC) consumes. SOC 2 and GDPR formalization are in progress and ISO 27001 is planned.
Join institutions governing payments, credit, compliance, HR, and AI-driven execution with the Decionis Decision Protocol.