Start with Deixic
Preparing for your first audit? Connect your tools and Deixic will help you check what’s needed, fix gaps, and keep the evidence.
Start your first SOC 2Compliance and security agentsAvailable
Full-stack compliance and security agents.
Get an extra pair of hands for everyday security work and your next audit. Deixic helps with the fixes, checks the results, and keeps the evidence ready for your auditor.
Example workflow · Employee offboarding
Someone’s leaving. Let’s help you close out their access.
When someone leaves, Deixic checks their access across your connected tools and helps remove it. Your team approves sensitive changes. If a system needs more time, we keep track of what’s left and check again.
- Trigger
- HR termination recorded
- Owner
- Security
- Done when
- The listed access is revoked and read back.
Result The listed access is removed and verified. GitHub account deletion was not authorized.
07 Closed
- Listed employee access revoked and independently verified
- Then: evidence attached to CC6.2 · control rechecked · passing
- Changes
- 4
- Approvals
- 1
- Denied
- 1
- Read-back checks
- 5
| System | Desired | Observed |
|---|---|---|
| HR systemTerminated | Terminated | Terminated |
| Google WorkspaceSuspended | Suspended | Suspended |
| GitHubNot a member | Not a member | Not a member |
| AWS access keyInactive | Inactive | Inactive |
| AWS prod adminNot assigned | Not assigned | Not assigned |
Connect your existing platform
Keep the platform your team uses. Deixic helps you fix the issues it finds and sends the evidence back.
Connect your compliance platform- Start
- Investigate
- Plan
- Authorize
- Act
- Verify
- Closed
Need to make sure code gets reviewed?
Ask Deixic to help protect your main branch. It can also pick up issues found by your compliance platform and help you fix them.
| Stage | What Deixic does | On one branch protection job |
|---|---|---|
| Start | Ask Deixic for help, or let a change in your tools start the work. | Request: require reviews before code merges |
| Investigate | We check the current settings in the tools involved. | payments-api: 0 required reviewers |
| Plan | You can see the proposed changes and which ones need approval. | 2 changes: one change, one sensitive |
| Authorize | Deixic follows your rules and asks the person you choose before sensitive changes. | Change runs. Admin enforcement waits for Platform |
| Act | Deixic makes the changes you allow and records what it did. | Reviewers set to 1, admin enforcement on |
| Verify | We check the settings again to make sure the fix worked. | Read back: 1 reviewer, admins included. Test passing |
| Closed | You get the checked result and the evidence for your audit. | Receipt dx_01K7B4W2ZP8E3VQ6TJ9HN5RC1A |
You choose what Deixic can do
Allow routine fixes under your rules. Choose who reviews sensitive changes in the app or Slack. Approvals and policy
| Class | Examples | Decision |
|---|---|---|
| Observe | Read branch rules in GitHub, list AWS access keys, read the termination date in the HR system | Runs |
| Change | Turn on required reviews, deactivate an unused access key, remove a departed user from a Google Workspace group | Runs within the policy you grant |
| Sensitive | Remove a production admin role, enforce rules on administrators, change an organization-wide sign-in policy | Waits for a named approver |
| Outside authority | Delete an account, set a policy only your company decides | Denied, or sent to you as a decision |
We check that the protection is in place
After changing the rules, Deixic checks GitHub again to make sure code requires a review before it can merge. See what’s recorded
- Observed drift0 required reviewersRead from GitHub before any change
- Changed, unverifiedSet to 1Deixic made the change and has not read it back
- Verified1 required reviewerRead back from GitHub and matches the desired state
Deixic receipt
Closeddx_01K7B4W2ZP8E3VQ6TJ9HN5RC1A
- Work
- Pull requests merge without review
- Desired state
- main on payments-api requires 1 review, administrators included
Changes · 2
- GitHubRequired reviewers set to 1Branch protection policy
- GitHubRules enforced on administratorsApproved by a.kim, Platform
Read back · 3
- GitHubRequired reviewers1
- GitHubEnforce for administratorsOn
- Source toolTest re-runPassing
Deixic Code in your terminal.
The coding agent for the terminal, scripts, and CI. Install it and start in one command.
curl -fsSL https://raw.githubusercontent.com/dx-corp/code/main/scripts/install.sh | bashApprovals for any governed action.
Policy is checked before an action runs, and Dex goes ahead, stops, or sends it to a named approver. Approvals and policy
Approval before executionProduction change
- Requested
- Policy checked
- Decision
- Recorded
Terraform apply against production
coding-agent · Platform
Production changesAllow this action against production/networking?
- Agent
- coding-agent
- Target
- production/networking
- Action
- terraform apply
- Policy result
- Human approval required
Evidence attached
- Terraform plan
- Rollback plan
Trace the cost of the work you delegate.
See which agents are running, who owns them, and month-to-date model spend by agent.
The same system runs the rest of company work
Compliance execution is the first objective. Dex and the agents you already use run on the same context and authority. Use your existing agent or meet Dex.
Completed work should improve the next task.
- 01Delegate a real task
An agent prepares a brief, fixes code, or works in a connected system.
- 02Give it context and authority
Company context and governed tools, with policy and named approvals deciding what proceeds.
- 03Check the result
Review against explicit criteria, and replay real sessions to test changed models, prompts, and skills.
- 04Choose what earns reuse
Keep corrections as reviewed knowledge, procedures as skills, and decisions with their results.
- 05Start the next task from that experience
Reuse the knowledge, procedures, and connections, and revise them when the work changes.
Your team decides what future work relies on. Skills and tests keep the method and its success criteria outside the model.
The company-owned layer
What stays with your company after each task
Deixic connects the CRM’s accounts and the repository’s code to agent work, its checks, and the rules for what happens next.
- CRMAccount owner and renewal date
- SupportOpen customer issue
- DecisionsAgreed exception and owner
What the agent can useA brief with the blocker, owner, and source links.
Each lookup respects the source system’s access rules.
- 02MemoryApproved corrections carry into later work
- 03SkillsProcedures your team chose to repeat
- 04ConnectionsSystems Dex can read from and act in
- 05WorkDocuments, sheets, apps, records, and routines that outlive a thread
- 06EvaluationReplays that check a new model or method
- 07AuthorityApprovals and rules for what can proceed