See every actor in your business systems
See what the AI in your business is actually doing.
Your CRM has an AI in it. So does your DMS, your lead tool, your email. It has write access, your people have logins, and nobody is watching either one. Vigilo sits at the boundary, logs every action by every actor in a record the vendor cannot alter, enforces your rules, and alerts a human the moment anyone steps out of line. The AI that watches your AI, and everyone else with a key.
Built for auto dealerships first. Works with any business that has handed its data to software and people.
Why this exists
A dealership's CRM AI deleted customer records. Nobody saw it. Nobody could prove it.
The store found out when the records were gone. The vendor's own log said what the vendor's own log said. There was no independent record, no rule that could have stopped it, and no alert when it happened.
That is the position every business is in today. The AI inside your software acts on its own schedule with real permissions. Your employees carry the same data out the same door. And the only witness is the company that sold you the software.
Vigilo is the second witness. For the AI you hired, the people you employ, and whatever reaches in from outside.
How it works
Four things, done independently of the vendor, for every actor.
Record
Every action, by the AI or by a person with a login, is written to a log the vendor cannot touch. Each entry is chained to the one before it with a SHA-256 hash, so a missing or altered record is provable.
Enforce
Your rules run first and always win. No deletes on customer records by an AI. No bulk exports by anyone. No writes at 2 a.m. Where the vendor exposes a hook, Vigilo blocks the action before it executes.
Alert
You get an email and a text the moment a rule fires, with who did it, what they did, the rule, and a one-click acknowledge. A second-opinion classifier flags anything odd the rules did not name.
Prove
Export a signed, hashed evidence file for any date range. When you sit down with the vendor, or with an employee, you are not guessing. You have the record.
Never edits your records
Vigilo observes, logs, alerts, and can block. It has no write access to your data beyond saying no.
Rules beat the model
Deterministic rules decide. The AI classifier is a second opinion, never the judge.
Append-only by design
No update or delete is possible on the audit tables. Enforced in the database, not in app code.
Pricing
Per rooftop, per month.
Annual contract with a 90-day exit. Groups of ten or more rooftops take 20% off.
Vendor AI Guard
Guard
$500/ rooftop / month
Watch the AI already inside your CRM, DMS, and lead tools, and anyone acting through the same door.
- Independent, append-only audit log of every action, AI or human
- Your rules enforced: block deletes, cap exports, flag off-hours writes
- Email and SMS alerts with one-click acknowledge
- Hash-verified evidence export for vendor disputes
- Default dealership ruleset, onboarding call
adds Workforce AI Watch
Guard + Watch
$1,000/ rooftop / month
Everything in Guard, plus the doors the AI does not use: logins, browsers, and outside AI tools.
- Everything in Guard
- Google Workspace and Microsoft 365 login and bulk-read anomalies
- Managed-browser detection of pastes and uploads to AI sites
- Log, warn, or block, per store
- New-country login and mass-read alerts
adds Inbound Injection Shield
Full Shield
$1,500/ rooftop / month
Everything above, plus a screen on what reaches your AI from the outside.
- Everything in Guard + Watch
- Scans lead notes, inbound email, chats, and uploads for prompt injection
- Tag, strip, quarantine, or alert
- Links an attack attempt to the AI action it caused, as proof
- Critical severity when both fire on one record
Guard is available now. Watch and Shield modules ship on the same spine and are offered as they release.
Who it is for
Dealerships first. Any company with data worth watching next.
Dealer principals and GMs who want to know what the CRM's AI did last night, and who exported the customer list on Friday. Group IT that needs one audit log across every rooftop. Controllers who need proof when records go missing.
Vigilo was built by a dealership operator with nearly thirty years on the floor and in the finance office, after watching this happen to a store. It is generic by design: the same guard works on any system where software or people can read and write your data.
Subscription inquiry
Tell us who touches your data.
We will come back with a straight answer on fit, what the integration looks like for your systems, and what onboarding looks like for your store.
Or write directly: charlie@vigilolabs.ai