AI governance and human-in-the-loop approval in one open source system. Your team works in Claude chat, the CLI or Slack. Every action is governed, filtered and logged, and a person approves what matters.
The teammate that knows your clients, deals and calendar works with the right permissions.
Your team drafts, plans and reasons in Claude or ChatGPT all day. That is where the work actually starts.
Moving between the two means pasting client detail into chats no one governs: no approvals, no filter, no audit trail.
GITL closes the gap: the chat app gets your teammate's answer, never your systems.
Ask your own AI teammate and get its reply. It answers with your own permissions.
Your submissions, access and tool requests, and what is waiting for a decision. Filing only puts it in the queue.
Approvers approve, send back or decline. The chat app asks them to confirm every decision, and it is recorded.
Plus: teach your crew member what you work out in the chat. More on that in a minute.
In Claude.ai: Settings, Connectors, Add custom connector. Paste the Shoofly address and keep the detected sign-in options.
A Shoofly page shows which app is asking and exactly what it may do. Approve, and you land back in the chat, connected.
No keys, no passwords to copy. The chat app never sees one.
Screens: company view, Oct 2026.
From the chat or by the crew member. Connecting approves nothing; filing only queues it.
Visible to the person who filed it and to the people allowed to decide it.
Approve, send back or decline. The chat app asks the approver to confirm each one.
Your company system re-checks the approver and the exact item before anything changes, then logs it.
Approvals ask twice on purpose. Approver sign-ins are re-confirmed every day, and deciding needs the company workspace.
| Company Claude workspace | Personal Claude account | |
|---|---|---|
| Ask your crew member | Yes, with your permissions | No |
| Client data | Yes, minus restricted clients | Never sent |
| Restricted clients (regulated, BAA, NDA) | Never sent; a filter withholds any slip | Never sent |
| Queue, requests, teaching | Full | Status, file a request, save notes |
| Decide approvals | Approvers only | No |
| Model training on your data | Not used for training (business terms) | Client data never reaches it |
| What is kept | Questions and replies, 30 days | Saved notes only, in your crew member |
| Audit trail | Every call: who, which tool, when | Every call |
The filter checks every reply before it reaches the chat app. Restricted clients, SSNs and card numbers are always withheld; on a personal account, every client detail is.
Disconnect one chat app, or every app at once when someone leaves the team.
Turn the connector off for everyone in one step if anything looks wrong.
Asks per person per day are capped, and the cap is enforced in one place.
Usage counts against each person's budget, visible in your company cockpit.
Short-lived sign-ins renew automatically; approvers re-approve every day.
Admins see usage counts and short daily summaries, never anyone's chats.
A short call: we show GITL running, walk through approvals, filters and the audit trail, and mark where a person should stay in the loop. Open source, or operated by Shoofly.