We built a SOC 2 reviewer for AI sessions, and kept AI out of the execution path

We built a SOC 2 reviewer for AI sessions — and kept AI out of the execution path

AI coding tools now touch auth code, modify Terraform, handle credentials, and change deployment pipelines. Most teams have no record of this. For teams under SOC 2, that gap is becoming a real problem.

We built Chron to fix the audit trail problem. Today we're shipping the review layer.

What Chron captures

Chron is an MCP server. It sits in every AI conversation and records structured events to a local SQLite database:

We built a SOC 2 reviewer for AI sessions, and kept AI out of the execution path

Related reading

From Audit Log to AI Governance Platform. How Chron Is Closing the Gap

From AI logger to AI governance layer, what 5,600 downloads taught us about…

Hardcoded Secrets: Why AI Code Fails Your First SOC 2 Audit

Human-on-the-Loop: AI Reviewing AI PRs at cortex (769 PRs/month, while raising…

AI Is Writing All the Code. Who's Reviewing It? (Please Don't Say Another AI)

I built an AI code reviewer with 6 parallel agents. Here’s the architecture,…