Governance

Autonomy you configure, not autonomy you inherit.

ConfigLedger can be read-only, Sandbox-only, or permitted to promote approved changes to Production under your rules. Your organisation sets the boundary.

Every change set carries its requester, its analysis, its tests, its approvers and its rollback plan.

Control

You decide how much the AI is allowed to do.

Three execution levels, set per environment. A CFO can get real value from ConfigLedger without ever granting an AI unrestricted production administration.

Analyse
Read-only

ConfigLedger maps, explains and recommends. It makes no changes of any kind.

Sandbox Agent
Build and test

ConfigLedger can create, change and test configuration in Sandbox. Production is untouched.

Production Agent
Governed promotion

Approved change sets can be promoted to Production under your organisation's governance rules.

Production change policy
Every change keeps its history
  • Who requested it
    The original business requirement, in the requester's words.
  • What was analysed
    The dependencies traced before the plan was written.
  • What was built
    The exact configuration and code, before and after.
  • What was tested
    Scenario results and QA findings, including warnings.
  • Who approved it
    Named approvals against your governance rules.
  • What happened after
    Post-deployment monitoring on the affected objects.
Safe reversion

We do not claim that everything is reversible.

Many configuration changes can be restored from a captured snapshot or a corrective deployment. Some operations — merged records, deleted objects, data already sent to an external system — cannot simply be undone.

So instead of promising a universal undo button, ConfigLedger produces a rollback plan before it executes anything, and tells you plainly how confident that rollback is.

Rollback readiness — CHG-00284
Configuration snapshot capturedReady
Previous workflow definition retainedReady
Affected data backup createdReady
External side effectsNone detected
Rollback confidenceHIGH

Where a change cannot be cleanly reversed, ConfigLedger says so before you approve it, rather than afterwards.

Roles & controls

Understand access without digging through permission matrices.

ConfigLedger helps teams understand role configuration and identify potential control conflicts for further review. It is intelligent visibility and control review — not a replacement for enterprise GRC software.

Financial Controller
Custom role · 6 assigned users
VendorsFull
Vendor BillsFull
JournalsCreate
Customer PaymentsEdit
Employee RecordsView
Bank DetailsView
User ManagementNone
Potential risk indicators
  • Can create and approve journals
  • Can edit vendors and process vendor payments
  • Access across all subsidiaries
  • Cannot administer users

Your NetSuite contains years of business logic.

Understand it. Then change it safely.

Map your configuration, trace every dependency, and turn business requests into governed changes that are tested in Sandbox and deployed only when you approve.

Understand → Change → Validate → Control