Skip to main content

AI Modes

Vigilos offers two mutually exclusive modes for AI model access. You can switch between modes at any time from Settings > AI Configuration.

Managed Mode

Vigilos provides access to AI models with no setup required. No API keys needed. Usage is tracked on a credit-based system.

BYOK Mode

Bring Your Own Keys. Connect your own AI provider accounts for full control over model selection, usage, and billing.

Managed Mode

In managed mode, Vigilos handles all AI provider infrastructure. Your organization selects from a list of available models, and usage is tracked against your plan’s credit allocation.
  • No API keys to configure
  • Models are pre-selected and maintained by Vigilos
  • Usage is billed through your Vigilos subscription
To use managed mode, navigate to Settings > AI Configuration and select Managed.

BYOK Mode (Bring Your Own Keys)

In BYOK mode, you provide API keys for one or more AI providers. This gives your organization full control over which models are used, how they are billed, and any provider-specific configurations.

Supported Providers

ProviderCredentials RequiredAdditional Config
AnthropicAPI Key-
OpenAIAPI Key-
AWS BedrockAccess Key ID + Secret Access KeyAWS Region
OpenRouterAPI Key-

Adding a Provider

1

Navigate to AI Configuration

Go to Settings > AI Configuration and select BYOK mode.
2

Select a provider

Click Add Provider and choose the provider you want to configure.
3

Enter credentials

Provide the required API key or access credentials for the selected provider. For AWS Bedrock, you will also need to specify the AWS region.
4

Test the connection

Click Test to verify that the credentials are valid and the provider is reachable. This makes a small test request to confirm access.
5

Save

Click Save to store the credentials. All API keys are encrypted with AES-256 before being written to the database.
API keys are encrypted immediately upon submission and cannot be viewed again after saving. If you need to update a key, you must replace it with a new one.

Model Controls

Regardless of which mode you use, you can configure which models are available to your organization.

Model Whitelist

The allowed models list restricts which AI models members of your organization can use. Only models on this list will appear in model selection dropdowns across the platform.
  • If the whitelist is empty, all models available from your configured providers are accessible
  • Add specific model IDs to restrict access to a curated set
This is useful for organizations that want to standardize on specific models for cost control or compliance reasons.

Default Model

Set an organization-wide default model that is pre-selected when members open a new AI conversation. Members can still choose a different model from the allowed list, but the default provides a consistent starting point.

Per-Provider Defaults

When using BYOK mode with multiple providers, you can also set:
  • Per-provider allowed models - restrict which models are available from each provider
  • Per-provider default model - set a default model for each provider

AI Usage & Adoption

Vigilos provides visibility into how your organization uses AI features, helping you optimize costs and drive adoption.

Usage Tracking

Monitor AI spend across your organization: total requests, tokens consumed, and estimated cost per provider. Use this data to set budgets and identify unexpected usage spikes.

Model Usage Breakdown

See which models your team uses most, helping you optimize model selection and cost. Compare performance and cost across providers to find the right balance for your organization.

Adoption Metrics

Track how many team members are actively using AI features, question volume trends, and engagement over time. Identify teams or individuals who could benefit from additional training or onboarding.

Cost Optimization

Identify opportunities to reduce AI costs by reviewing model usage patterns and switching to more cost-effective models where appropriate. For example, route simple queries to smaller models and reserve larger models for complex analytical questions.

Security

All AI provider credentials are encrypted with AES-256 before storage. Vigilos platform administrators cannot view plaintext API keys. Keys are only decrypted at the moment they are used to make an API request to the AI provider.
When you remove a provider or switch from BYOK to managed mode, the stored credentials are permanently deleted from the database.