IT leadership
Know which teams use which AI tools, what they cost and who approved them.
This is already on your desk.
- 01
The follow-up questions need more detail
A total starts the conversation. To explain a change, you need the teams, tools and approval decisions behind it. - 02
The register and the approvals live in different places
The subscriptions live in a spreadsheet. An approval is somewhere in an email thread. Putting them together gives your team a record they can keep current. - 03
Agents are already spending on somebody's key
A process in engineering is calling a model on a key belonging to a person rather than to the business, and the cost lands at month end. A USD ceiling that refuses the call before egress is a different control from a dashboard reporting it afterwards.
- 01
What is this going to cost us?
The cloud trial is free for 30 days from workspace creation, with no card or automatic paid conversion. Provider model calls, model-assisted search and Google BigQuery scans can incur separate charges. Paid cloud prices are not published. At expiry, workspace changes, model calls and scheduled billing collection stop; authorised retained reads and exports remain subject to the shared traffic quota. Customer-hosted licensing and design-partner work are scoped separately.
- 02
How long before it tells me something I do not already know?
Register the subscriptions you already know about against a vendor, tool, team and owner, then map last month's finance export onto the import template and load it, as CSV through the dashboard (previewed before anything commits) or the same fields as JSON. The report then tells you what was billed per currency, which team it belongs to and whose name is on it. No time-to-value figure is published, because none has been measured on a customer's estate.
- 03
Who else is running this?
Nobody yet. There are no reference customers, no logos and no case studies, and we will not produce one for a first call. Broad general availability is a published no-go decision, which is what the Early access badge means. If that rules us out, it is better to know now.
- 04
I am not installing employee surveillance on my own staff.
Then do not, and this is not that. An approved, paid subscription is legitimate usage and is never reported as unauthorised use. The scope is narrower than it sounds, because the register is consulted in exactly one detector, per-user seat spend. A network egress export you supply names a source host and a destination host, which is not a verified employee identity and cannot establish what was typed. Conversation capture is off by default.
Cloud custody and optional customer-hosted controls are described separately. The 24 limits we publish, and the 9 risks a named person has to accept in writing, are on one page.
What we do not claimStart with your vendor list and finance export.
You write down the subscriptions you already know about, against a vendor, tool, team and owner email. Then you map the charge lines out of the export finance produces onto the import template with ten required columns and two optional columns, and the dashboard shows you the parsed lines before anything commits. The import path uses no billing connector or vendor admin credential.
- Import bounds
- Ten required columns, 1,000 lines and 2 MiB. Unknown fields, credentials in metadata, inconsistent attribution and invalid periods are rejected outright.
- Built to be run every month
- Identity is team, source and external id together. Reimporting the same invoice adds nothing; reusing an identity with different data returns a conflict and rolls the whole import back.
- Refusals are recorded like the successes
- A request refused at a ceiling produces the same evidence as one that ran, so month-end shows every decision, with no gap in the record.
Sample data in the real Token Observe interface, recorded from a local evaluation with a temporary database, a mock provider and one request. No live provider key was used. The product stamps its own demo rows SYNTHETIC EVALUATION DATA in these pixels.
It does not tell you what your staff typed.
The register records decisions about services, attributed to a team and an owner email: the person accountable for the subscription, not the person typing into it. An approved entry suppresses the matching seat-spend finding, so staff using a tool the business already pays for stop appearing on a report as though they had done something wrong.
- Capture off, or capture bounded
- The default mode stores no message text. Switched to redacted, the prompt as sent and the assistant's reply are both kept, mask-redacted before truncation and bounded.
- The seat census is the exception
- It holds employees by name, and it sits outside both the trace retention window and subject erasure. Put that in front of whoever advises you on data protection.
This is what does the work.
AI spend and subscriptions
What you were billed and what you were metered, recorded as two numbers and never added into one.
Approved and unauthorised AI
Approved, prohibited or unknown, so the subscriptions you already pay for stop arriving in the seat-spend report.
Agent registry
One record per agent, and it is the record the gateway enforces against.
Questions
We already pay Microsoft and Google for AI. Why another tool?
Keep them. Token Observe adds one register spanning every vendor you buy from, with a vendor, a tool, a team and a named owner on every entry and one of three states against it. It records what you were billed per currency, with subscription and API charges kept apart and metered estimates never folded in, and reports coverage as its own axis.
Do we need a vendor admin credential to import invoices?
Cloud billing connections require the provider's administrative or reporting credential. The separate invoice-import path needs no billing credential: you map an export you hold onto its import template. Two scheduled pull connectors are available separately: GitHub Copilot and Cisco Umbrella, each on a narrow read-scoped credential you supply and can withhold.
Will it cancel a subscription nobody is using?
No. It records the decision and names the owner; only the vendor can end the seat. Marking a service prohibited classifies later evidence accordingly; it does not stop anyone opening that tool in a browser or reclaim a licence from somebody who left. What changes is that the cancellation conversation has a named owner and an invoice line attached.
Bring the objection that is not on this page.
Create a cloud account and workspace. No card or server installation. Model calls and Google BigQuery scans can incur separate provider charges.