Compliance
Regulation meets the wire
The recurring themes across AI regulation – log what happened, minimize what you disclose, keep a human able to intervene, control what the system can do – are runtime properties. These pages map each framework’s obligations to the specific checks that support them.
The honest part, up front: no tool makes you compliant. Compliance is a property of your organization – its processes, contracts, and documentation – not of any component you install. What a guardrails proxy provides is technical measures and evidence that support the obligations below. Assess your own obligations with counsel.
Frameworks
EU AI Act
The 2026 digital omnibus moved the EU AI Act’s high-risk deadlines to Dec 2027 / Aug 2028 – but Article 50 transparency still lands 2 August 2026. What holds, and how runtime guardrails help.
GDPR
Sending prompts to model providers is processing personal data. How PII screening, pseudonymization, and screened logs support GDPR-aligned LLM deployments.
HIPAA
Using LLMs with patient data raises PHI disclosure risk. How PII screening and audit trails support HIPAA-aligned healthcare AI deployments.
Evidence beats attestation.
Every check records its verdict per request, every run keeps its trace – so when someone asks what your AI did and why, the answer is a query. We’re running a limited demo.