Skip to main content

What Is the Service Catalogue?

The service catalogue is Velatir’s inventory of over 4,000 AI services it can detect and monitor. It gives you a full view of which AI services exist, which ones your organisation actually uses, and how they are categorised. Use the catalogue to understand the AI landscape in your organisation. It answers the question: what AI services are in use, and what do I need to know about them? Open Service catalogue at the bottom of the sidebar. The catalogue is also where you pick the services to declare in your inventory.

How Services Are Detected

Browser detection

The browser extension identifies AI services used in the browser. This covers web tools, SaaS platforms, and browser-based interfaces.

Application detection

The desktop app identifies AI services running as native applications or built into local workflows.
Together, these cover both web and desktop AI usage.

Using the Catalogue

Browse or search

Search for a service by name, or filter by category, country, data processing region, whether it trains on your data, EU sovereignty, SOC 2, ISO 27001, HIPAA, DPA, or subscription control.

Review the details

Select a service to see its details. Where Velatir has assessed the service, you see its risk assessment and can open its Changelog. Otherwise you see its general, data practice, compliance, and security details.

Declare what you use

Add the services your organisation has chosen to your inventory. Anything used but not declared counts as Shadow AI.

Act on what you find

Use what you learn to set your Gatekeeper policy and discuss approved services with your teams.

Categories

The catalogue groups services into categories, so you can quickly see what kinds of AI your organisation relies on, from language tools to image generation to code assistants. Filtering by category helps you answer targeted questions, such as which code assistants are in use.

Capabilities per Agent

Open a service and find Agent Capabilities to see what Velatir can do on it, per agent. It shows whether Gatekeeper can allow or block the service, whether it has subscription control, and which Data Protector capabilities (input, files, clipboard, redaction) apply. Coverage differs across the catalogue, so check the detail view for a given service.

EU Sovereignty

For organisations with EU data residency requirements, the catalogue flags whether each service operates within EU infrastructure. This helps you identify services that may raise data sovereignty concerns and act on them.

Custom Services

If your people use a browser service the catalogue does not list, you can add it yourself. Open the Service catalogue and select Add service, or search for the service and select Add as custom service when nothing matches. This needs permission to manage the inventory. Give it a Name, its Website (the address your people open in the browser, which Velatir uses to recognise the service), a Category, and an optional Description. If the address is already in the catalogue, the form says which service it belongs to, so you can use that one instead. A custom service is marked Added by your organisation, not from the catalogue. Only your organisation sees it, and Velatir does not assess it: the details on its page come from you. You can declare it in your inventory, where it is listed under Custom services, and a Gatekeeper can allow or block it on its exact host. It has no risk assessment, no treatments and no declared use cases. Select Edit service to change its details, or Delete service to remove it together with its declaration and its allow and block rules. The deletion is recorded in the audit log.

When the catalogue catches up

When Velatir later adds the same service to the catalogue, you get a Catalogue match notification, and the custom service’s page says so. Compare the two, then choose:
  • Replace: your declaration and your allow and block rules move to the catalogue version, which comes with Velatir’s assessment and stays current. Your custom service is removed after a grace period. This cannot be undone.
  • Keep mine: both stay in the catalogue.
Switch to maintained on the custom service’s page opens the same choice.

Closed and Moved Services

Providers shut services down or move them to a new website. Velatir records both as changes to review on the services your organisation has declared or treated. See Service risk.
  • A closed service is marked This service has closed and will leave the catalogue. It stays in the catalogue for a while so you can review and compare its rules and treatments, and cannot be newly declared. On the date shown, it is removed together with its declarations and its allow and block rules.
  • A moved service keeps its identity. For a service your organisation has declared or treated, the change in its changelog records the website it moved from and to.

Inventory

Declare the services your organisation uses.

Service risk

Read risk assessments and record treatments.

Insights overview

See aggregated activity across your organisation.

Gatekeeper

Decide which services are allowed.