The compliance platform for AI and agent work.
Comma Compliance is the modern communications ingestion layer for regulated organizations. Arc is our platform for capturing, governing, and archiving AI and agent activity alongside the human channels we already cover. Arc Relay is the first piece, available now and open source.
Compliance used to mean email and chat. Now it means agents too.
For two decades, regulated firms have archived email, IMs, and mobile messaging because regulators treat them as business records. Comma Compliance was built for that world - we capture WhatsApp, Signal, iMessage, and 40+ other channels for SEC and FINRA-regulated firms.
AI and agent interactions are the next frontier. Every prompt, every tool call, every autonomous action an agent takes on a regulated user's behalf is becoming a record that needs to be governed, captured, and produced on demand. Comma Compliance Arc is how we extend the ingestion layer to cover that world.
One platform. Human channels and agent channels.
Arc is being built as a set of components that compose into a single compliance fabric for both human and agent activity. Arc Relay is the first piece you can download today. The rest of the platform is rolling out alongside it.
Arc Relay
Open-source MCP control plane. Sits between AI clients and your MCP servers. Auth, policy, middleware, audit trail, and per-tool access control.
The first piece. The hands-on, MIT-licensed taste of the platform.
Compliance MCP servers
Comma's compliance workflow tools - retention, legal hold, discovery, review, export - exposed as MCP servers so an agent can run the full lifecycle.
Compliance becomes an agentic workflow, not a manual one.
Arc Bridge
Self-hosted integrations for the AI infra you already run - Ollama, vLLM, LiteLLM, Open WebUI, and more. Capture without changing how your team works.
For teams running models behind their own firewall.
Arc Gate
API proxy for direct LLM provider traffic - OpenAI, Anthropic, Google, and friends. Same middleware pipeline, applied to raw model calls instead of tool calls.
For teams whose agents bypass MCP entirely.
All four components feed into one place:
Encrypted, tamper-evident records, ready for search, legal hold, and export.
The endgame: full lifecycle compliance, whether the work is being done by a human or an agent. Same review, same retention, same audit trail.
Wherever AI shows up in your stack, Arc covers it
Three surfaces, one compliance fabric. Pick the entry point that matches your stack today - we will meet you there.
Enterprise AI
Archive ChatGPT Enterprise, M365 Copilot, Claude Enterprise, and GitHub Copilot conversations with full metadata. Built for the regulated firm.
Developer & Agent AI
Capture MCP tool calls with Arc Relay today. API gateway and direct provider proxies coming next. For teams shipping AI features and agents.
Self-Hosted AI
Archive your internal AI stack - LiteLLM, Ollama, Open WebUI, vLLM, and more. Same encryption and audit trail, behind your firewall.
Available now - open source
Start with Arc Relay - the first piece of the platform
Arc Relay is the hands-on, open-source taste of what Arc is becoming. Run it today and see the control plane concept in action - per-user access, middleware, audit trail, the works - long before the rest of the platform lands.
How Arc works
Capture
Intercept AI activity via MCP control plane, API gateway, enterprise connectors, or self-hosted bridges.
Govern
Apply per-user policy, middleware, PII redaction, and access control before anything reaches a model or a tool.
Archive
NaCl Box encryption with tenant-isolated keys. Tamper-evident, immutable records with full conversation context.
Comply
Search, legal hold, export, and audit trail for regulators. Soon: agents that run the workflow themselves.
Where this is going
Compliance itself is becoming an agentic workflow.
Today, compliance teams click through review queues, set retention rules, and respond to subpoenas by hand. That work is exactly the kind of structured, policy-driven activity that agents are good at - if they have the right tools.
We are building Comma's compliance workflow tools - retention, legal hold, discovery, review, export - as MCP servers. An authorized agent will be able to run the entire lifecycle through the same Arc control plane that captured the records in the first place. Compliance becomes a service the agent can call, not a process the agent gets in the way of.
Regulators are catching up fast
SEC and FINRA enforcement against unarchived business communications has run into the billions. AI conversations and agent tool calls are the next frontier. Every prompt, every response, every autonomous action - if it touches a business decision, it is a record. The firms that build the capture layer now will not be the ones writing the fine cheques later.
Ready to see where this is going?
Try Arc Relay today, or talk to us about the full Arc platform for your organization.