Can I control which AI tools my organization is allowed to use?

Short answer: Yes. FortressAI provides per-tool assessment — granular control over exactly which AI tools are authorized and which are blocked — and location-based enforcement, so policy can be tied to where sensitive data lives rather than to individual applications. 
 Two complementary controls 
 
 Per-tool assessment: decide specifically which AI applications (Gemini, Copilot, and others) are permitted in your environment. 
 Location-based enforcement: define protection around the data locations that matter — keeping source code in the repository, not in a chatbot — with assignments controlled by users. 
 
 The Traffic Light Protocol 
 FortressAI policy is expressed as a traffic light: 
 
 Red — FortressAI blocks the AI tool from accessing the assigned data. 
 Yellow — access is evaluated conditionally, including dynamic handling of sensitive data. (The conditional paths that depend on Purview/MIP label enforcement and automatic PII/PDPL anonymization are in beta — see "Which FortressAI capabilities are generally available, and which are in beta?") 
 Green — approved use proceeds normally. 
 
 This lets organizations adopt AI deliberately rather than choosing between blanket bans that get worked around and open access that leaks data.