# Colchix

> Colchix is the AI Governance OS powered by agents that helps organizations move at AI-speed safely. ARGUS discovers AI usage and shadow AI, TALOS protects sensitive data at runtime, and ATHENA turns everyday activity into compliance and audit evidence, all powered by THEMIS. Together they bring visibility, protection and auditability to AI usage across employees and AI agents, in one platform.

Colchix works within the AI tools and LLMs teams already use, so nobody moves to a separate workspace: once the local agent and browser extension are installed, people keep working as usual. It starts from European requirements, with a global approach to AI governance: hosted in your region, prompts never stored, privacy by design.

The agents, the model under them and the platform:

- ARGUS, AI Discovery Agent: discovers AI usage beyond the approved tools, including shadow AI and personal AI accounts used for work, across employees, AI agents and AI-enabled software, and brings it into one AI inventory.
- TALOS, AI Data Protection Agent: detects, masks or tokenizes sensitive data at runtime, before it reaches AI tools, in approved tools and shadow AI alike, so teams keep using AI.
- ATHENA, AI Compliance Agent: turns observed AI activity into structured audit trails and compliance evidence, for frameworks such as the EU AI Act, the GDPR, ISO 42001 and the NIST AI Risk Management Framework.
- THEMIS, System One² AI model: Colchix's own AI model, which powers every agent.
- Colchix OS, AI Governance OS: the platform the agents run on.

For any sector, including healthcare, banking & finance, insurance, legal, manufacturing, public sector and tech.

Colchix B.V., John M. Keynesplein 10, 1066 EP Amsterdam, The Netherlands. hello@colchix.com

## Product

- [Colchix: AI Governance OS & Agents](https://colchix.com): the home page, with the agents, the Colchix OS film, the platform and the FAQ
- [The agents](https://colchix.com/#ai-agents): ARGUS, TALOS and ATHENA, powered by THEMIS
- [ARGUS, AI Discovery Agent](https://colchix.com/agents/argus): ARGUS gives you a 360° view of AI usage and shadow AI across employees and AI agents: a living AI inventory, adoption and spend, risk and policy fit, without collecting prompts.
- [TALOS, AI Data Protection Agent](https://colchix.com/agents/talos): TALOS masks or tokenizes personal data, credentials, confidential code and trade secrets at runtime, before they reach ChatGPT, Claude or any AI tool, and restores them in the answer. Prompts are never stored.
- [ATHENA, AI Compliance Agent](https://colchix.com/agents/athena): ATHENA turns everyday AI activity, across enterprise, personal and unmanaged AI, into structured audit evidence mapped to the EU AI Act, the GDPR, ISO 42001 and the NIST AI RMF, ready for every review.
- [Colchix OS](https://colchix.com/colchix-os): One console for all your AI: discover AI usage with ARGUS, protect sensitive data with TALOS and prove governance with ATHENA, side by side, all powered by THEMIS.
- [Colchix OS film](https://colchix.com/#colchix-os): a short film of the AI Governance OS at work
- [The platform](https://colchix.com/#platform): what each agent does, across every door AI comes through
- [FAQ](https://colchix.com/#faq): shadow AI, masking sensitive data, compliance and audits, and who Colchix is for
- [Integrations](https://colchix.com/integrations): plugins for Claude and ChatGPT, and the Colchix OS MCP server
- [Colchix OS MCP](https://colchix.com/integrations/mcp): The Colchix OS as an MCP server for Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot and any agent that speaks MCP: check what's approved, scan what's about to be sent and file the evidence as the code ships. In development: get early access.
- [Colchix for Claude](https://colchix.com/integrations/claude): Type @Colchix in Claude and ask your AI Governance OS: which AI tools your teams use, whether a file is safe to share, the evidence for your next audit. The Colchix plugin for Claude is in development: get early access.
- [Colchix for ChatGPT](https://colchix.com/integrations/chatgpt): Type @Colchix in ChatGPT and ask your AI Governance OS: whether a tool is approved, whether a file is safe to send, how much was masked this week. The Colchix plugin for ChatGPT is in development: get early access.
- [Integrations early access](https://colchix.com/integrations/early-access): be the first to use the plugins and the MCP server, in development; sign up on the page
- [Any sector](https://colchix.com/solutions/any-sector): Colchix wherever people and agents use AI
- [Healthcare](https://colchix.com/solutions/healthcare): See every AI tool in your hospital, mask patient data before it reaches ChatGPT, Claude or Copilot, and keep audit evidence for the GDPR and the EU AI Act. ARGUS, TALOS and ATHENA for healthcare.
- [Banking & finance](https://colchix.com/solutions/banking): Keep client names, IBANs and deal codenames out of ChatGPT, Claude and Copilot, see every AI tool in use and keep audit evidence. ARGUS, TALOS and ATHENA for banks and financial firms.
- [Insurance](https://colchix.com/solutions/insurance): Govern the AI inside your claims: mask policyholder data before it reaches any model through your AI gateway, find shadow AI and keep audit evidence. ARGUS, TALOS and ATHENA for insurers.
- [Legal](https://colchix.com/solutions/legal): Protect client confidentiality in every AI tool: rules per team, your client list recognized with no retraining, briefs masked through MCP, and audit evidence. ARGUS, TALOS and ATHENA for legal teams.
- [Manufacturing](https://colchix.com/solutions/manufacturing): Keep process know-how, supplier prices and drawings out of public AI, find the AI on shop-floor PCs and in your software, and keep evidence for customer audits. ARGUS, TALOS and ATHENA for manufacturers.
- [Public sector](https://colchix.com/solutions/public-sector): Be ready for your next AI audit: sealed records filed under the EU AI Act, the GDPR and ISO/IEC 42001, gaps flagged first, citizens' data masked. ARGUS, TALOS and ATHENA for public administrations.
- [Tech](https://colchix.com/solutions/tech): Ship with AI agents, not your secrets: find coding agents and MCP servers, redact keys and customer data before they reach the model, and answer customers' AI security questionnaires. ARGUS, TALOS and ATHENA for software teams.
- [Security & deployment](https://colchix.com/security): where Colchix runs (SaaS and single-tenant, hosted in the EU, available now; private VPC and on-premises on request), what each agent processes and keeps, the security layers, and the security documents, requested as a pack on the page

## Company

- [Manifesto](https://colchix.com/manifesto): seven myths about AI governance, why they don't hold, and what Colchix believes instead; signed by the founders
- [Start for free](https://colchix.com/start-for-free): start with Colchix for free; leave your details and the team sets you up
- [Book a demo](https://colchix.com/demo): a walkthrough of Colchix with the team; leave your details and they find a time
- [Colchix for Good](https://colchix.com/colchix-for-good): ARGUS, the AI Discovery Agent, free for nonprofits, universities, research institutes and AI-safety groups; apply on the page
- [Colchix for Startups](https://colchix.com/colchix-for-startups): for startups under 50 people, up to Series A: the whole Colchix OS free for 3 months, then ARGUS free until month 12 and TALOS and ATHENA at 50% off, so they can answer the AI questions in enterprise security reviews; apply on the page
- [Events](https://colchix.com/events): where to meet the team in person, next at Web Summit 2026, Lisbon, 9–12 November
- [LinkedIn](https://www.linkedin.com/company/colchix): Colchix on LinkedIn
- [X](https://x.com/colchix): Colchix on X
- [Reddit](https://www.reddit.com/r/colchix/): Colchix on Reddit
- [GitHub](https://github.com/Colchix-B-V): Colchix on GitHub
- [Crunchbase](https://www.crunchbase.com/organization/colchix): Colchix on Crunchbase
- [F6S](https://www.f6s.com/colchix): Colchix on F6S

## Blog

- [Insights on AI governance & EU compliance](https://colchix.com/blog): the Colchix blog, on shadow AI, the EU AI Act, GDPR and runtime governance for enterprise AI
- [Every article in full](https://colchix.com/llms-full.txt): the blog's articles as markdown in one file, newest first
- [System One AI & THEMIS](https://colchix.com/blog/topic/system-one-ai): a topic page, its articles in reading order. What System One models are, how Jev differs from LLMs, what the EU AI Act and GDPR mean for them, and THEMIS, the sovereign System One model Colchix is building for Europe.
- [EU AI Act & GDPR](https://colchix.com/blog/topic/eu-ai-act): a topic page, its articles in reading order. What the EU AI Act and GDPR each ask of enterprises using AI, which obligations are in force and which were delayed, and the evidence that answers both.
- [Shadow AI](https://colchix.com/blog/topic/shadow-ai): a topic page, its articles in reading order. What shadow AI is, why it spreads faster than shadow IT, how to detect it and which tools do, and how it turns into data leakage.
- [Data protection & tokenization](https://colchix.com/blog/topic/data-protection): a topic page, its articles in reading order. How sensitive data actually reaches LLMs, why redaction breaks AI answers and tokenization doesn't, and how runtime protection stops data before it leaves.
- [Runtime AI governance & audit](https://colchix.com/blog/topic/runtime-governance): a topic page, its articles in reading order. What AI governance means in practice, why policies on paper don't stop anyone, what an AI audit trail must contain, and how governance differs from AI security.
- [K11 Consulting and Colchix: Bringing Operational AI Governance to European Organisations](https://colchix.com/blog/k11-consulting-colchix-ai-governance-partnership.md): K11 Consulting and Colchix combine AI Officer, privacy and security expertise with operational AI visibility to help European organisations govern AI in practice.
- [AI Governance Partner & Reseller Programs: How Advisors, Consultants and System Integrators Can Build a New Revenue Stream](https://colchix.com/blog/ai-governance-partner-reseller-program.md): Learn how AI governance advisors, DPOs, vCISOs, consultancies, system integrators and MSPs can use, resell and build new revenue streams around AI governance software.
- [Introducing THEMIS: Europe’s Enterprise-Ready System One Model for AI Governance](https://colchix.com/blog/introducing-themis.md): Colchix is building THEMIS, a sovereign System One model for real-time data protection, typed AI decisions and enterprise AI governance in Europe.
- [System One AI for Enterprise: Governance, Security and Real-Time Decision Use Cases](https://colchix.com/blog/system-one-ai-enterprise.md): Learn how System One AI models can be used in enterprise workflows for routing, security, governance, sensitive-data detection and real-time decisions.
- [Is There a European Alternative to Jev? System One AI, Sovereignty and THEMIS](https://colchix.com/blog/european-alternative-to-jev.md): Explore European alternatives to Jev, including open decision models, self-hosting and THEMIS, Colchix’s sovereign System One model for Europe.
- [Jev and the EU AI Act: What System One Models Mean for AI Governance](https://colchix.com/blog/jev-eu-ai-act.md): How does Jev fit into the EU AI Act? Learn what System One models mean for AI governance, compliance, enterprise deployment and European organisations.
- [Best Shadow AI Detection Tools in 2026: A Practical Comparison](https://colchix.com/blog/best-shadow-ai-detection-tools-2026.md): Compare five shadow AI detection tools for visibility, data protection, audit evidence and European deployment. Find the right platform for your organization.
- [Can European Enterprises Use Jev? GDPR, Data Residency and EU Readiness Explained](https://colchix.com/blog/can-european-enterprises-use-jev.md): Can Jev be used in Europe? Assess its GDPR, data residency, retention, deployment and sovereignty considerations for European enterprises.
- [What Is Jev? System One Models vs LLMs Explained](https://colchix.com/blog/what-is-jev-system-one-model.md): Jev is TypeSafe AI's first System One model. Learn how it differs from LLMs, how typed probabilistic decisions work, and where it fits in enterprise AI.
- [Best AI Governance Platforms for European Enterprises in 2026](https://colchix.com/blog/best-ai-governance-platforms-europe-2026.md): Compare six AI governance platforms for European enterprises across discovery, risk, runtime controls, audit evidence and regulatory alignment.
- [The AI Act Enforcement Timeline: What's Real and What's Delayed](https://colchix.com/blog/ai-act-enforcement-timeline.md): Vendor marketing still runs 'AI Act deadline: August 2026' messaging that's a year out of date. Here's what's actually in force, what's delayed, and what to check before it shapes a budget decision.
- [AI Audit Trail: What Regulators Actually Ask For](https://colchix.com/blog/ai-audit-trail.md): When a regulator or DPO asks for evidence of AI activity, 'we have a policy' isn't an answer. Here's what a real AI audit trail needs to contain — and why most organizations don't have one.
- [AI Data Leakage: How Sensitive Data Actually Reaches LLMs](https://colchix.com/blog/ai-data-leakage.md): AI data leakage isn't hypothetical — it's a predictable pattern that happens the same way across industries. Here's how it actually occurs, and where most defenses fail to catch it.
- [Shadow AI Detection: How to See What Your Team Actually Uses](https://colchix.com/blog/shadow-ai-detection.md): You can't govern AI usage you can't see. Here's what actually works for detecting shadow AI inside an organization — and why most approaches only catch half of it.
- [AI Governance vs AI Security: What's the Difference?](https://colchix.com/blog/ai-governance-vs-ai-security.md): They get used interchangeably in vendor pitches, but AI governance and AI security solve different problems. Here's the distinction that actually matters when evaluating a solution.
- [What Is AI Governance? A Practical Definition for Regulated Enterprises](https://colchix.com/blog/what-is-ai-governance.md): AI governance isn't a policy document. It's the technical ability to see, control, and prove what your organization's AI systems actually do. Here's what that means in practice.
- [What Is Shadow AI? Risks, Examples and Enterprise Mitigation](https://colchix.com/blog/what-is-shadow-ai.md): Shadow AI is every AI tool your employees use that IT never approved — and it's already inside your organization. Here's what it looks like, why it's growing, and how to see it.
- [AI Act vs GDPR: What Actually Changes for Enterprises](https://colchix.com/blog/ai-act-vs-gdpr.md): GDPR and the AI Act aren't the same law wearing a different name. Here's exactly where they overlap, where they diverge, and what that means for your compliance program.
- [Why Redaction Isn't Enough: Tokenization vs Destructive Masking](https://colchix.com/blog/tokenization-vs-redaction.md): Redaction deletes data and breaks context. Tokenization replaces it with something reversible. The difference determines whether your AI governance layer actually works.
- [Runtime AI Governance: Why Policies on Paper Don't Stop Anyone](https://colchix.com/blog/runtime-ai-governance.md): A signed AI usage policy has never once stopped an employee mid-deadline. Runtime governance is the difference between intending to control AI use and actually controlling it.

## Optional

- [Privacy Policy](https://colchix.com/legal/privacy): How we handle personal data, as a controller under the GDPR.
- [GDPR & your rights](https://colchix.com/legal/gdpr): Access, rectification, erasure, portability and objection: how to ask, and how fast we answer.
- [Terms of Service](https://colchix.com/legal/terms): The terms that govern the use of Colchix.
- [Data Processing Agreement](https://colchix.com/legal/dpa): Our commitments as your processor under Article 28 GDPR.
- [Sub-processors](https://colchix.com/legal/subprocessors): Who processes data on our behalf, where, and why.
- [Cookie Policy](https://colchix.com/legal/cookies): Which cookies this site uses, and why.
- [Security](https://colchix.com/legal/security): How we protect the platform and the data in it.
- [Responsible Disclosure](https://colchix.com/legal/responsible-disclosure): How to report a vulnerability, and what we promise in return.
- [AI Transparency](https://colchix.com/legal/ai-transparency): How our own AI, THEMIS, works and is governed, in the spirit of the EU AI Act.
- [Acceptable Use Policy](https://colchix.com/legal/acceptable-use): What Colchix may and may not be used for.
- [Accessibility](https://colchix.com/legal/accessibility): Our commitment to an accessible site and product.
- [Legal notice](https://colchix.com/legal/imprint): Company details: who we are and where to find us.
- [Blog feed](https://colchix.com/blog/rss.xml): the Colchix blog, as RSS