AI features and monthly usage
Graften's AI features — vCISO chat, AI insights, board reports, document and incident playbook generation, questionnaire analysis, gap remediation guidance and AI-generated remediation playbooks — are an add-on. They are not part of a base plan, and they draw on a monthly allowance of AI credits.
Turning AI features on
The add-on is enabled per account by Graften. If it is off, any AI action returns AI add-on required (HTTP 403, code AI_ADDON_REQUIRED) and the portal shows that message next to the action. Contact Graften to enable it. Accounts that existed before the add-on was introduced were switched on automatically.
What costs what
Each successful AI action uses credits, weighted by how much work it does:
- 1 credit — vCISO chat message, gap remediation guidance, AI-generated remediation playbook
- 2 credits — AI insights, document drafting
- 5 credits — document generation, incident response playbook, questionnaire analysis
- 10 credits — board report
An action that fails (an AI error, an unreadable response) is refunded, so you are only charged for work that was delivered. Built-in library playbooks are free; only a newly AI-generated one uses a credit.
Monthly allowance
The allowance depends on the plan: Starter 100, Professional 400, Enterprise 1,500 credits a month. Graften can set a different allowance for an individual account. The count resets at the start of each calendar month (UTC). When the allowance is used up, AI actions return HTTP 429 (AI_LIMIT_REACHED) with the amount used and the date it resets.
Seeing your usage
Account → Subscription shows credits used against the allowance, a breakdown by feature, and the support assistant count. The same figures are available from GET /api/v1/ai/usage.
The support assistant
The in-portal support assistant is not part of the add-on and uses no credits. It is limited to 300 questions a month.
Using the AI proxy directly
POST /api/v1/vciso/proxy forwards a request to the AI model. It always uses Graften's current model, caps response length and conversation size, and counts against the same credits. Include a feature label (such as board_report or document_draft) so the call is metered at the right cost; an unlabelled call is metered at 5 credits.