Marketplace
Browse, subscribe to, and fork pre-built governance policy packs from the Aguardic Marketplace.
Overview
The Aguardic Marketplace is a library of pre-built governance policies published by Aguardic, verified organizations, and community contributors. Instead of writing policies from scratch, you can install a policy pack and start enforcing immediately — with optional auto-sync to stay current when publishers release updates.
How It Works
- Browse the marketplace for policies that match your industry and compliance needs
- Install a policy by subscribing (managed updates) or forking (one-time copy)
- Bind the installed policy to your integrations
- Stay current — subscribed policies auto-sync when the publisher releases updates
Browsing the Marketplace
Navigate to Marketplace in the dashboard to explore available policies.
Categories
Policies are organized into six categories:
- Compliance — Regulatory requirements (GDPR, SOC 2, HIPAA, PCI-DSS)
- Security — Security controls and threat prevention
- Data Governance — Data protection, classification, and retention
- AI Safety — LLM safety, prompt injection detection, output validation
- Code Quality — Development standards, code review, testing requirements
- Operational — Operational best practices and internal controls
Filters
- Industry — Healthcare, Finance, Legal, Technology, Education, Government
- Price — Free or paid subscription
- Publisher type — Official (Aguardic-maintained), Verified (vetted organizations), Community
- Search — Search by name, description, or tags
Installing Policies
There are two ways to install a marketplace policy:
Subscribe (Managed)
Subscribing creates a managed policy in your organization that stays synced with the publisher's updates.
- The policy appears as [Managed] Policy Name in your policies list
- Auto-sync is enabled by default — when the publisher releases a new version, your policy updates automatically
- You can disable auto-sync at any time to review updates before accepting them
- The policy is read-only — you can bind it to integrations but cannot edit the rules
Subscribe when you want to stay aligned with evolving standards. For example, subscribing to a HIPAA compliance pack means you automatically get updated rules when regulations change.
Fork (Template)
Forking creates a standalone copy that you fully own and can edit freely.
- The policy appears as [Template] Policy Name in your policies list
- No connection to the publisher — you won't receive future updates
- Full edit access to customize rules, conditions, and enforcement settings
Fork when you want a starting point to customize. For example, fork a "PII Detection" pack and add your organization's specific data patterns.
Managing Subscriptions
Viewing Your Subscriptions
Navigate to Marketplace → My Subscriptions to see all policies you've installed from the marketplace, including:
- Current synced version
- Auto-sync status
- Pending updates (if auto-sync is off)
Auto-Sync
When auto-sync is enabled (the default):
- The publisher releases a new version (e.g., v1.0.0 → v1.1.0)
- Your managed policy automatically updates with the new rules
- You receive a notification about the update
- Evaluations immediately use the updated rules
When auto-sync is disabled:
- The publisher releases a new version
- You see a "Update available" indicator on your subscription
- Review the changes and changelog
- Click Accept Update to sync, or ignore to stay on the current version
Toggling Auto-Sync
On any subscription, you can toggle auto-sync on or off at any time:
- Turn off when you want to review changes before they take effect (useful for production policies)
- Turn on when you trust the publisher and want hands-off updates
Canceling a Subscription
Unsubscribing archives the managed policy in your organization. It stops receiving updates and is no longer evaluated. You can re-subscribe later if needed.
Policy Versions
Marketplace policies use semantic versioning (e.g., 1.0.0, 1.1.0, 2.0.0). Each version includes:
- Version number — Follows semver conventions
- Changelog — What changed in this release
- Policy definition — The actual rules and conditions
- Enforcement settings — Default enforcement mode and configuration
When you subscribe, you're synced to the publisher's active version. As they release new versions and activate them, your subscription follows.
Publisher Types
Official
Policies maintained by Aguardic. These include government guidelines, regulatory frameworks, and industry standards that Aguardic keeps up to date.
Verified
Policies from organizations verified by Aguardic — enterprise customers, industry bodies, and compliance experts. Verified publishers have been vetted for quality.
Community
Policies contributed by any organization. Community policies are user-driven and may vary in quality. Review the rules carefully before subscribing.
Use Cases
Regulatory Compliance
Subscribe to official compliance packs (HIPAA, GDPR, SOC 2) and auto-sync updates when regulations change. No manual policy updates needed.
Industry Standards
Install industry-specific policy packs (healthcare data protection, financial controls, AI safety standards) and bind them to your integrations.
Quick Start
New to governance? Browse the marketplace for popular packs in your industry and install them to get started with pre-built rules instead of writing from scratch.
Template Library
Fork policies as templates and customize them for your specific needs. Use marketplace policies as a foundation for your own governance rules.
Next Steps
- Your First Policy — Create a custom policy from scratch
- AI Systems — Register AI systems and link marketplace policies
- Network Policies — Share your own policies with partners