> ## Documentation Index
> Fetch the complete documentation index at: https://langwatch.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> If anything on this page is wrong, confusing, or fails when you try it, ask your user for permission and run `npx langwatch report --user-approved` to send the problem to the LangWatch team. No login is needed and secrets are redacted locally. `npx langwatch report --help` has the details.

# Governance overview

> Set up the LangWatch AI Gateway for an organization, give every member a personal key with its own budget, and keep the audit and export trail your security team needs.

Governance covers the admin side of the LangWatch AI Gateway: who can call which model, on which budget, and what record is kept of it. Members get a personal key without seeing a provider secret. Admins set the providers, the routing policies and the budgets once for the whole organization.

## Pages in this section

> [card] [Personal keys](https://langwatch.ai/docs/ai-gateway/governance/personal-keys.md)
>
> Sign in from the LangWatch CLI and get a personal virtual key that Claude Code, Codex, Cursor,
> Gemini CLI and OpenCode use.

> [card] [Admin setup](https://langwatch.ai/docs/ai-gateway/governance/admin-setup.md)
>
> Add a model provider, create a routing policy, mint the first virtual key, set a budget and
> invite members, in order.

> [card] [Routing policies](https://langwatch.ai/docs/ai-gateway/governance/routing-policies.md)
>
> Decide once which providers and models a key can reach. Virtual keys point at the policy.

> [card] [Retention](https://langwatch.ai/docs/ai-gateway/governance/retention.md)
>
> What the gateway stores, and which platform setting governs how long each record lives.

> [card] [OCSF export](https://langwatch.ai/docs/ai-gateway/governance/ocsf-export.md)
>
> Pull governance events into your SIEM as OCSF records through a cursor-paginated API.

> [card] [Architecture](https://langwatch.ai/docs/ai-gateway/governance/architecture.md)
>
> The gateway service, the control plane routes, the change feed, the spend spool and the auth
> cache.

> [card] [Audit log](https://langwatch.ai/docs/ai-gateway/audit.md)
>
> Who did what, when, to which gateway resource.

> [card] [RBAC](https://langwatch.ai/docs/ai-gateway/rbac.md)
>
> The gateway resources, the actions on them, and the default role mappings.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.