Enterprise operations
Enforce authority across the systems that already run the business.
The same authority — who may spend what, on whose behalf, up to which limit — is usually re-implemented in four systems with four drift rates. Define it once and enforce it at each point of execution, with a signed record an auditor can read.
First verdict in 15 minutes — no connector required
The sandbox above needs no account. When you want the verdict from your own workspace, this is the guided path: one ERP-shaped evaluation against the live protocol endpoint, in shadow, before any connector is installed.
curl -X POST https://api.decionis.com/v1/protocol/evaluate-decision \
-H "Authorization: Bearer $DECIONIS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"decision_type": "PROCUREMENT_RELEASE",
"mode": "SHADOW",
"context": {
"actor": "erp.integration.svc",
"resource": "purchase_order",
"amount": 48200
}
}'Create a workspace to mint your key — evaluations run in shadow by default. Start free
On Salesforce? Install it in your org and approve once; there is nothing to paste. Rolling out in SAP, ServiceNow or Workday? Request an install link for your instance.
What goes wrong
The specific actions teams tell us they are afraid of. Each one is a decision that happens faster than a human can review it.
- A vendor payment posting without segregation of duties
- A purchase order above delegated authority
- A payroll run with an unapproved change
- An access change granting root scope
- A termination or compensation change out of band
- An ITSM change bypassing review
Where the decision goes
One deterministic check between the intent and the effect — ALLOW, ESCALATE or BLOCK, with a signed record either way.
Surfaces — where you encounter it
Connectors — how systems reach it
- SAPBeta
Two gates on vendor payments, purchase orders and procurement approvals, checked before they execute in SAP.
- ServiceNowBeta
Scoped app (x_dec_decionis) that wires Decision Dossiers and drift evidence into incident, change and risk workflows.
- SalesforceBeta
Managed package, installed and connected in one approval: Flow, Apex and Agentforce actions checked before they run, shadow-first.
- WorkdayBeta
Payroll, expense and supplier-invoice actions, and HR changes, checked for authority before they commit.
What to do next
The same five steps every time. Nothing else on this page competes for your attention.
- Simulate this recipe
Run the policy against a realistic action in the browser. Push it past what the rules allow and watch the verdict come back. No account.
- View the signed Decision Dossier
See exactly what was decided and why: the rule that fired, the evidence it read, the policy version in force, and an Ed25519 signature you can verify yourself.
- Deploy in shadow mode
Measure what the policy would have caught on your own traffic without touching the live path. Every recipe defaults to shadow, so the first deployment carries no execution risk.
- Connect a real workflow
Point the same policy at the system where the action actually originates — a checkout, an ERP posting, a Zap, an agent's tool call.
- Share the verified result
Publish the proof: a public verification link, an embeddable badge, a PR comment, or an anonymized shadow-mode finding. This is how the next person discovers Decionis.
