Question 1

What exactly does Aguardic do that OneTrust or Vanta doesn't?

Accepted Answer

OneTrust and Vanta lead with governance workflow and certification automation, and in 2026 several governance platforms announced enforcement features of their own. The difference is that Aguardic is enforcement-native and cross-surface: every AI action, pull request, document, email, and chat message is evaluated against your installed policies in real time and blocked, warned, or logged based on your enforcement mode, across your whole stack rather than one platform's configuration. When a regulator or enterprise security team asks for evidence, you export the actual record of enforcement decisions. The approaches coexist. Many teams run both.

Question 2

How is Aguardic different from Bedrock Guardrails, OpenAI moderation, or other model-level safety?

Accepted Answer

Model-level safety features filter harmful outputs and prompt injections at the model layer. Aguardic operates above the model layer to enforce regulatory obligations. Bedrock Guardrails won't tell you whether your chatbot satisfies EU AI Act Article 50's disclosure obligations or generate audit evidence formatted for a regulator. We enforce policies that map to specific statute sections across every model you use: OpenAI, Anthropic, Gemini, custom models. The two layers complement each other.

Question 3

What AI systems can Aguardic govern?

Accepted Answer

The core is the model call path: OpenAI, Anthropic, and Gemini traffic, MCP agent sessions, API evaluation, and a Node SDK for AI embedded in your own product (Python and Go SDKs coming). Beyond it, OAuth integrations extend the same policies and evidence to GitHub, GitLab, Bitbucket, Google Drive, Dropbox, OneDrive, Slack, Teams, Gmail, and Outlook. If your AI stack isn't natively supported, we work with you directly to add integration.

Question 4

What happens when my regulation changes?

Accepted Answer

Policy packs auto-update when regulators issue implementing rules or amendments. When Colorado repealed and replaced its AI Act with SB 26-189 in May 2026, our policy pack and coverage pages updated within the week. When the EU AI Office issues Article 9 guidance, our EU AI Act pack updates to reflect it. You see the update in your changelog with citations to the source document.

Question 5

Is Aguardic legal advice?

Accepted Answer

No. Aguardic is not a law firm and does not provide legal advice. Our coverage matrices, policy packs, and audit evidence are tools to help you demonstrate compliance with specific regulations. Your legal counsel should review the evidence before you rely on it in a regulatory proceeding. We cite specific statute sections to make counsel's review faster, but we do not replace counsel.

Question 6

Does Aguardic guarantee compliance?

Accepted Answer

No, and any vendor that does is lying to you. Compliance with regulations like the Colorado AI Act requires both software enforcement, which we provide, and human judgment calls, which we don't. Our coverage matrix honestly shows what Aguardic covers, partially covers, and does not cover for each regulation. Full compliance requires your counsel, your operators, and your organization's judgment on top of the evidence we generate.

Question 7

What if a customer gets fined despite using Aguardic?

Accepted Answer

Aguardic generates the continuous evidence record that supports your defense: the log showing, decision by decision, that your obligations were met in the window a regulator asks about. Under regimes like Colorado's SB 26-189, enforcement runs through a 60-day notice-and-cure process, and that record is what a cure response is built from. Whether evidence is sufficient in any specific action depends on the facts, the agency's judgment, and your counsel. We do not indemnify customers against regulatory fines. Our terms of service specify this clearly.

Question 8

How is my data protected?

Accepted Answer

SOC 2-aligned architecture with Type II audit in preparation. AES-256 for data at rest. AES-256-GCM for integration credentials. TLS 1.2+ for data in transit. Organization-level data isolation at the database layer: your data is never accessible to other organizations. Full security documentation is available at /security.

Question 9

Does Aguardic have access to our production systems?

Accepted Answer

Only the access you grant through OAuth scopes. For most integrations we request read-level access to evaluate AI actions. For enforcement actions like blocking a violation, the scopes required are higher and explicitly disclosed before you authorize. If you want to evaluate without touching the request path, monitor-only mode records every policy evaluation without blocking or warning.

Question 10

We already have Microsoft Purview. Do we need Aguardic?

Accepted Answer

Purview is strong on Microsoft surfaces with sensitive-info-type patterns and E5 licensing. Aguardic is cross-stack (GitHub, Slack, OpenAI, Anthropic, Google Drive, and more), driven by regulation-mapped policy packs rather than data patterns, and AI-output-aware. On Microsoft surfaces the two complement each other; outside them, Purview does not reach.

Question 11

What actually happens when a policy is violated?

Accepted Answer

The surface's native action: the LLM request is blocked, the pull request check fails, the file is quarantined, the email is labeled, the channel gets a warning. Every violation also writes a record with severity and an evidence snapshot into one triage queue, so your team reviews everything in one place and the audit trail builds itself.

Question 12

Can I cancel anytime?

Accepted Answer

Monthly plans cancel any time with no cancellation fee. Annual plans renew annually unless you cancel before the renewal date. Data export is always available during your subscription and for 30 days after cancellation. Specifics are in our terms of service.

Question 13

What does implementation actually look like?

Accepted Answer

For customers with AI deployed through supported OAuth integrations, onboarding is typically 30 to 60 minutes end to end: installing the policy pack, connecting integrations, and generating first evidence in the same session. For customers with AI embedded in production application code, SDK integration is work on your engineering team's side, and we support you through it directly. A 30-minute working session with our team is the fastest way to understand what implementation looks like for your specific architecture.

Question 14

How much does Aguardic cost?

Accepted Answer

Growth is $499/month with 50,000 policy evaluations, 15 integrations, and 10 seats. Business is $1,299/month with 250,000 evaluations, 50 integrations, and 50 seats. Enterprise is custom: SSO/SCIM, dedicated CSM, custom SLA, HIPAA BAA. Every paid plan includes all major compliance policy packs at no extra cost. 14-day free trial, no credit card.

Question 15

Are the compliance policy packs an extra cost?

Accepted Answer

No. Every paid plan includes all major compliance policy packs (Colorado AI Act, EU AI Act, HIPAA, SOC 2, NIST AI RMF, ISO 42001, AIUC-1, and more) at no extra cost. Packs auto-update when regulators issue implementing rules or amendments. We don't charge per pack, per regulation, or per control. The only cost drivers are scale (evaluations, integrations, seats) and the enterprise-grade features gated to Business and Enterprise.

EU AI Act Article 50 transparency · Aug 2, 2026 · High-risk delayed to Dec 2, 2027	High-risk delayed by Digital Omnibus	Article 50 transparency lands first: disclose AI interaction, label AI content. High-risk follows Dec 2027 / Aug 2028.
HIPAA + HTI-1 HIPAA + HTI-1	Active enforcement	PHI enforcement is live and durable. HTI-1 AI criteria tracked as HTI-5 rulemaking moves.
Colorado AI Act SB 26-189 · Jan 1, 2027 (replaces SB 24-205)	Replaced by SB 26-189	Repealed and replaced by a narrower notice + appeal regime; enforcement contingent on AG rulemaking.
ISO 42001 + NIST AI RMF Standards · procurement-driven	Table stakes	The certification stack enterprise procurement asks for. Packs map controls to runtime evidence.

Ship AI that passes the security review.

Built for your role

Continuous compliance, how it works

Classify

Enforce

Prove

Audit-ready in minutes, not months

Governance you install, not implement.

The program way

The Aguardic way

Regulations move. Your policies keep up.

Pre-built compliance packs

Proof, not promises

Answer the AI questions with controls Aguardic enforces

From the Blog

Article 50 Takes Effect August 2. Here's the Two-Week Readiness Checklist.

Colorado AI Act (SB 24-205): What AI Companies Need to Know and How to Comply

Australia Has No AI Act. It Does Not Need One to Fine You A$100 Million.

Questions compliance teams ask before they commit.

Have a question we didn't answer?

Prove Compliance in Minutes