Agent platform
OpenAI Assistants
Requirements
4
before agents go live
Connections
1
in your workspace
Agents found
0
across those connections
Governed
0%
0 of 0 in the register
Compliance requirements
What this platform must satisfy
Model inventory evidence
SR 11-7Every assistant must be registered as a model with a named owner, intended use and validation record before production use.
Data residency and retention
BCBS 239Confirm zero data retention or 30-day retention settings on the organisation, and record which projects handle customer data.
Prompt and output logging
FFIECEnable org-level logging and export assistant runs to your evidence store so decisions can be reconstructed.
Vendor assurance
OCC 2013-29Hold a current SOC 2 Type II report and DPA for the OpenAI organisation used by the bank.
Integration steps
How to connect it
- 1
Create a restricted API key
In the OpenAI dashboard create a project-scoped key with read access to assistants. Do not use an admin key.
- 2
Record the project
Note the project name so discovered agents can be traced to the right cost centre.
- 3
Connect here
Paste the key into the connect form. TRUINT calls GET /v1/assistants and imports every assistant it finds.
- 4
Govern each agent
Promote discovered assistants to the AI asset register; baseline controls are created automatically.
Your connections
Technical details
- Authentication
- API key
- API base
- https://api.openai.com/v1
- Access needed
- api.assistants.read, api.responses.read
- Discovery
- Automatic
Evidence collected