Approve innovation. Without losing control.
Forigi is the runtime under the AI-built tools your teams will ship anyway. Microsoft SSO, governed data, full audit, and a kill switch on every app — per-tenant policy you control end-to-end.
Shadow AI is already in your tenant. The question is whether you can see it.
Every read, write, and external call — under your policy.
IT decides which data sources are exposed, which apps can use which sources, per-app rate limits, audit retention, and a kill switch on every app.
Governed data
IT publishes data sources from SharePoint and OneDrive. Apps consume them as the viewer, not a service account.
Full audit trail
Every read, write, and external call is logged. Answer "what data went where, by whom" in seconds.
Kill switch
Any app can be paused or deleted instantly by an admin. Tenant policy controls every data source the runtime exposes.
Microsoft Verified Publisher
Forigi is operated by Knotbook Software Inc., a Microsoft AI Cloud Partner Program member with verified-publisher status on the Microsoft Entra app registration.
Per-tenant policy
Data-source allowlist, per-app source binding, rate limits, and audit retention — all configured per tenant.
Encryption + retention
Encrypted at rest. Audit log retention configured to match your compliance baseline.
Viewers see what they have permission to see — nowhere else.
Apps are static HTML and JavaScript only. They cannot make cross-origin requests, hold credentials, or run server code. All data access flows through a constrained SDK that the platform controls. Identity is propagated to source systems, so viewers see only what they already have permission to see in SharePoint and OneDrive.
Every app, every data flow, one screen.
The IT side of Forigi: a tenant-scoped console that lists every app your team has shipped, streams the audit feed in real time, and puts a kill switch on every row.
What’s in the private beta today.
Microsoft SSO via Entra ID. Every app sits behind your tenant boundary; viewers must be signed into your tenant.
SharePoint · OneDrive — all reads run as the viewer, so existing M365 permissions decide what each person sees. More Microsoft sources are on the roadmap.
What ends up on your IT dashboard.
Builder describes the tool to Claude Code
They type what they need; Forigi connects via MCP, so Claude Code already knows which SharePoint and OneDrive sources your tenant has authorised.
Forigi handles the boring parts
It generates the app, infers and provisions the database, wires the data sources, sets access controls, and gives the builder a URL on your internal domain. Microsoft SSO, governance, audit — all automatic.
You see everything. You can stop anything.
IT has a single dashboard showing every app and every data flow — with a kill switch on every one.
The things IT always asks.
How does Forigi keep our data safe?
What can IT control?
Does this require any backend code?
Where do apps run?
What integrations are supported?
Pricing?
Who's behind this?
Reserve an expedited pilot review.
A founder will reach out within 5 business days to walk through governance fit and pilot scoping.