01
Policy in the path
The policy engine sits between the agent and each action. No action can skip the check.
This answers whether an agent can act outside the policy.
Gatehouse is a product of Surehand, a small operator-run firm that deploys and runs governed agents for clients.
We did not set out to build a platform.
Werangovernedagentsforclients.Eachdeploymentneededthesameeightcapabilities,sowebuiltthemonce.
- P/01Policy engine
- E/02Runtime enforcement
- R/03Record
- A/04Approvals
- S/05Spend controls
- L/06Least privilege
- C/07Continuous evaluation
- X/08Data portability
Gatehouse puts all eight in one place.
How they fit together
The four steps of a governed run.
The manifest
Your team writes the scope, role, limits and review rules into one signed file, versioned like code. The agent runs under that version only.
The check
The policy engine checks each action before it happens. Anything the manifest does not name is refused.
The approver
When confidence drops below your threshold, the run pauses. It goes to one named approver, not a shared inbox.
The record
Each action, hold and decision is saved in order and chained by SHA-256. Change one record and the chain visibly breaks.
What we promise
What buyers can hold us to.
02
A named person on the hard call
Each hard call has one owner. They get the evidence in one place, and their decision and reason are saved. Overriding a block needs two names.
This answers who decides when the policy cannot.
03
A record you can take with you
Each run is recorded in order, and any change shows. Your team can run that check itself. The audit trail exports in open formats and reads without Gatehouse installed.
This answers whether you can check the record without trusting us.
What we believe
Where we stand, and how you can check it.
Hard calls go to one person. Agents get only the access the task needs. If we fall short, the audit trail will show it.
- B/01check · before each action
- B/02trail · chained by SHA-256 · check it yourself
- B/03export · open formats · no lock-in
- 01cases · composite · labelled
- 02questionnaire · in writing · named
- 03nda · dpa · before material moves
- B/01
Rules are enforced while the agent runs
Each action is checked before it runs, and stopped if the policy says no.
check · before each action
- B/02
You can check the evidence yourself
Each run is saved to a tamper-evident trail. Your team can check it without taking our word.
trail · chained by SHA-256 · check it yourself
- B/03
You can leave and keep your records
The trail exports in open formats and reads without Gatehouse installed.
export · open formats · no lock-in
The rules we work by
You can check each of these on this site, or ask us in writing.
- 01
Cases are composites
Each one is anonymised by agreement and labelled. No customer is named on this site.
cases · composite · labelled
- 02
Questionnaires answered in writing
Each answer has a name on it.
questionnaire · in writing · named
- 03
NDA and DPA first
Both are signed before any material moves.
nda · dpa · before material moves
Who we build for
Clients who need governed agents, deployed and run.
We have no separate product team. Each part of Gatehouse is there because a client deployment needed it and a buyer asked for proof.
- Buyers who send a security questionnaire and judge the answers
- Teams with one live process to bring
- Reviewers who want written answers with a name on each one
- Teams that want to check the trail themselves
- Buyers who want to be able to leave with their records
What Gatehouse is not
The claims we do not make.
What we do not have today, and what we will not do.
- No SOC 2, no ISO 27001 today. If that changes, we will say so here.Read our security position
- No logo wall. Cases are composites, anonymised by agreement and labelled.The case studies
- No customer names on this site.
- No account managers in between. Surehand is a small operator-run firm, so you deal with the operators.
- No feature we cannot explain and defend on a call with your team.
At a glance
Key facts about Gatehouse and Surehand.
- Product of
- Surehand
- What it is
- The control plane for enterprise AI agents
- The firm
- A small operator-run firm that deploys and runs governed agents for clients
- Product screens
- Simulated. No customer data appears anywhere.
- Case studies
- Composite, with names and figures changed
- Contact
- support@surehand.io
- Walkthrough
- Book a walkthrough
No founder stories, no stock team photos.You meet the team on the walkthrough.
