Compliance & Security

PromptGuard is built with enterprise security requirements in mind. This page outlines our security practices, compliance status, and data handling policies.

At a glance

For security teams evaluating PromptGuard, the three things that usually matter most:

What we do with your data — pass-through architecture: we scan prompts and responses in real time and don’t store prompt content or train on it. Your LLM provider keys stay with you. (See Data Handling.)
Proof for auditors — every security decision is recorded in a tamper-evident, hash-chained audit log with event ID, threat type, confidence, and timestamp.
Where we stand on frameworks — summarized in the table below.

“Compliant” vs “Aligned”: Compliant means we meet the requirement (with a DPA or independent attestation where applicable). Aligned means PromptGuard provides the technical controls a framework requires, but formal third-party certification is still in progress or out of scope. We don’t claim certifications we don’t hold.

Security Certifications

Certification	Status	Details
SOC 2 Type II	Not yet certified	On the roadmap. Today we offer a stronger verification path for security teams: source access under NDA, build provenance on published packages, Ed25519-signed offline licences, and — for self-hosted deployments — a reproducible zero-egress audit. A formal SBOM is not yet generated in CI. Contact us.
GDPR	Supported	Data export + deletion endpoints; DPA available for signature
CCPA	Supported	Service-provider terms available in the DPA
EU AI Act	Aligned	Technical controls map to Articles 9, 11, 12, 13, 14, 15
ISO/IEC 42001	Aligned	AI management system controls for risk, logging, transparency, oversight
ISO 27001	Planned	On roadmap for 2026
HIPAA	Not offered	PHI-adjacent workloads: deploy self-hosted / air-gapped so data never leaves your environment

“Aligned” means PromptGuard provides the technical controls that satisfy the framework’s requirements. Formal certification (where applicable) requires third-party audit. For enterprise customers requiring specific compliance certifications, contact sales@promptguard.co to discuss your requirements.

EU AI Act Alignment

The EU AI Act (Regulation 2024/1689) imposes requirements on high-risk AI systems, enforceable from August 2, 2026. PromptGuard provides technical controls that map to each requirement:

EU AI Act Article	Requirement	PromptGuard Capability
Art. 9 — Risk Management	Systematic risk identification, analysis, and mitigation throughout the AI lifecycle	Policy engine with configurable threat detection (16 detector types, 1000+ patterns), per-request risk scoring, behavioral analysis
Art. 11 — Technical Documentation	Maintain documentation demonstrating risk management and system behavior	OpenAPI spec auto-generated from live API, governance reports with narrative sections, evidence packages for auditors
Art. 12 — Record-Keeping	Automatic recording of events enabling risk identification and post-market monitoring	Tamper-evident audit trail (SHA-256 hash chaining), every security decision logged with event ID, threat type, confidence, and timestamp
Art. 13 — Transparency	Enable deployers to interpret output and use the system appropriately	Per-decision explainability (threat type, confidence, matched detectors), governance reports with incident timelines
Art. 14 — Human Oversight	Mechanisms for human oversight, intervention, and override	Dashboard with real-time visibility, configurable alert thresholds, manual policy overrides, role-based access
Art. 15 — Accuracy, Robustness, Cybersecurity	Meet standards for accuracy, resilience to attacks, and cybersecurity	Evaluated at F1=0.887 on 2,369 adversarial samples, automated red team testing, agent identity with cryptographic credentials, behavioral drift detection

ISO/IEC 42001 Alignment

ISO/IEC 42001:2023 is the international standard for AI Management Systems. PromptGuard’s controls map to its Annex A requirements:

ISO 42001 Control	Requirement	PromptGuard Capability
Risk Assessment (6.1)	Identify and assess AI-specific risks including security, misuse, and safety	14 threat detector types covering OWASP LLM Top 10, configurable policy presets, per-request risk scoring
Data Governance (Annex A)	Ensure data is appropriate, accurate, and free from harmful biases	39-type PII detection and redaction, pass-through architecture with zero data retention, content safety classification
Transparency (Annex A)	Provide transparency about AI system use and decision rationale	Per-decision explainability, governance reports, audit trail with full decision context
Human Oversight (Annex A)	Allow intervention and override capabilities	Dashboard with real-time monitoring, configurable block/allow/redact policies, manual credential rotation and revocation
Monitoring (Annex A)	Detect and measure AI system behavior over time	Behavioral drift detection with Jensen-Shannon divergence, anomaly alerting, agent statistics tracking
Incident Response (10)	Detect, respond to, and learn from AI system failures	Real-time threat alerts, webhook notifications, tamper-evident audit trail for forensic analysis, governance reports with incident timelines

Data Handling

What Data We Process

Data Type	Processing	Retention
Prompts & Messages	Scanned for threats in memory	Not stored (pass-through)
API Keys	Encrypted at rest (AES-256)	Until deleted
Usage Metrics	Aggregated counts	90 days
Security Events	Threat details logged	30 days (configurable)
Audit Logs	User actions	90 days

Data Flow

Pass-Through Architecture

PromptGuard operates as a pass-through proxy:

Prompts and responses are scanned in memory
Content is not stored after processing
Only metadata (timestamps, threat types, confidence scores) is logged
Your data never touches disk in unencrypted form

Security event logs may contain sanitized snippets of blocked content for debugging purposes. These are automatically purged after the retention period. Enterprise customers can disable content logging entirely.

Infrastructure Security

Cloud Infrastructure

Component	Provider	Security
Compute	Google Cloud Run	Serverless, auto-scaling
Database	Supabase (PostgreSQL)	Encrypted at rest, TLS in transit
Secrets	Google Secret Manager	IAM-controlled access
CDN/DDoS	Google Cloud Armor	Rate limiting, WAF
DNS	Cloudflare	DDoS protection

Encryption

Layer	Standard
In Transit	TLS 1.3
At Rest	AES-256
API Keys	Argon2id hashing
Secrets	Google KMS

Network Security

All endpoints require HTTPS
Cloud Armor per-IP anti-abuse rate limiting at the network edge
No public SSH access to infrastructure
VPC-based isolation between services
Private database connections (no public IP)

Access Control

Authentication Methods

Method	Use Case
API Key	Server-to-server, SDK integrations
Session (JWT)	Dashboard access
OAuth	GitHub/Google SSO
SAML/OIDC	Enterprise SSO (Enterprise tier)

API Key Security

Keys are hashed with Argon2id before storage
Only the prefix (pg_live_xxxxxxxx...) is stored in plain text
Full key shown only once at creation
Keys can be rotated without downtime
Project-scoped API keys (no per-key permission types; tier gating via subscription)

Role-Based Access (Enterprise)

Role	Permissions
Owner	Full access, billing, delete organization
Admin	Manage users, projects, settings
Member	View projects, create API keys
Viewer	Read-only dashboard access

Audit Logging

What’s Logged

Event	Details Captured
Authentication	Login, logout, failed attempts
API Key Management	Create, rotate, delete
Project Changes	Settings, policies, presets
Security Events	Blocked requests, threat types
User Management	Invites, role changes

Accessing Audit Logs

Go to Dashboard → Settings → Audit Logs
Filter by date range, event type, or user
Export as CSV or JSON

Log Export (Enterprise)

Enterprise customers can configure:

SIEM Integration: Stream logs to Splunk, Datadog, etc.
S3 Export: Daily log exports to your bucket
Webhook: Real-time log forwarding

Incident Response

Security Incident Process

Detection: Automated monitoring + manual review
Containment: Isolate affected systems
Investigation: Root cause analysis
Notification: Affected customers notified within 72 hours
Remediation: Fix deployed, post-mortem published

Reporting Security Issues

Found a vulnerability? Contact us:

Email: security@promptguard.co
Response Time: 24 hours for initial acknowledgment
Bug Bounty: Coming soon

Data Residency

Current Regions

Region	Data Center
US	Google Cloud us-central1 (Iowa)

Planned Regions

Region	Status
EU (Frankfurt)	Q3 2026
APAC (Singapore)	Q4 2026

Enterprise customers requiring specific data residency can request dedicated deployment in their preferred region.

Vendor Security

Subprocessors

Vendor	Purpose	Data Processed
Google Cloud	Infrastructure	All data
Supabase	Database	Metadata, logs
Stripe	Billing	Payment info
Resend	Email	Email addresses

LLM Providers

PromptGuard forwards requests to your chosen LLM provider. We do not store data sent to:

OpenAI
Anthropic
Google AI
Cohere
AWS Bedrock
Azure OpenAI

Your data handling agreement is with each LLM provider directly.

AI Agent Governance

PromptGuard provides four governance capabilities for AI agents operating in production:

Agent Identity — issuance and rotation (Partial)

Register an agent and it receives a unique pgag_ secret, stored bcrypt-hashed, shown once, and rotatable. Exactly one credential per agent is active at a time, enforced by a database constraint.

POST /api/v1/agent/register — Register and receive a one-time credential
POST /api/v1/agent/{agent_id}/rotate-credential — Revoke old credential, issue new one

PromptGuard does not currently verify a presented credential at request time; agent IDs on tool-call and guard requests remain self-asserted. Issuing and rotating a credential is the whole of the implemented control. Audit entries record the agent ID the caller asserted, and governance reports do not report credential-verification counts. Treat this control as Partial in a control matrix. If you need enforced agent identity today, bind it at your own network or gateway layer.

Behavioral Drift Detection

After an agent accumulates sufficient observations, PromptGuard freezes a behavioral baseline capturing the agent’s normal tool-usage distribution. Every subsequent request is compared against this baseline using Jensen-Shannon divergence. If the distribution shifts beyond the configured threshold, a BEHAVIORAL_DRIFT alert fires.

Tamper-Evident Audit Trail

Every audit event’s SHA-256 hash covers every field the event stores and incorporates the previous event’s hash in your organization’s chain, forming a cryptographic chain that every PromptGuard instance extends in sequence. If any event is modified or deleted, the chain breaks and verification fails. Use POST /dashboard/audit-log/verify-chain to verify the integrity of your own events over any time range; the evidence package’s Audit Chain Integrity control (CC7.4) reports the chain walk.

If you exported an evidence package before 3 September 2026, re-export it. Two things changed:

Audit events written before 27 August 2026 were signed over eight of their fields (hash version 1). Events since then are signed over every stored field (hash version 2). Version-1 events are never re-signed and are reported as unverifiable — not intact, not tampered. Every package now states v1_count, v2_count and cutover_at so you can see which rows carry which signature.
Earlier packages could show CC7.4 as compliant over a period in which no events were verified. A period with nothing to verify now reports insufficient-data with the narrative “No events in window; chain not evaluated”, and a package is not produced at all if the audit log cannot be read.
A row whose category, severity or outcome predates a schema narrowing can no longer be decoded, and is reported rather than treated as a read failure: it is excluded from verified_count and counted in malformed_count, with the affected event IDs listed (up to 20) in malformed_events. It does not make the chain around it look broken.

Governance Reports

Generate auditor-facing narrative reports covering all four governance capabilities:

curl -X POST https://api.promptguard.co/dashboard/compliance/governance-report \
  -H "Cookie: session=YOUR_SESSION_COOKIE" \
  -d "framework=soc2&days=30"

The report includes sections for agent identity verification rates, behavioral drift alerts, audit chain integrity status, security decision summaries, and a chronological incident timeline.

Enterprise Security Features

Available on the Enterprise tier:

Feature	Description
Self-Hosted Deployment	Run PromptGuard in your own infrastructure
Air-Gapped Mode	Zero external network calls
SSO (SAML/OIDC)	Integrate with your IdP
IP Allowlisting	Restrict API access by IP
Custom Data Retention	Configure log retention periods
Dedicated Support	SLA-backed support with named contact
Custom BAA	HIPAA Business Associate Agreement (planned)

Security Questionnaire

Need to complete a vendor security assessment? We provide:

CAIQ (Consensus Assessment Initiative Questionnaire)
SIG Lite (Standardized Information Gathering)
Custom Questionnaires (for Enterprise customers)

Contact security@promptguard.co for these documents.

Responsible Disclosure

We appreciate security researchers who help keep PromptGuard secure:

Report the issue to security@promptguard.co
Do not publicly disclose until we’ve addressed it
Provide steps to reproduce
Allow reasonable time for remediation (90 days)

Next Steps

Security Overview

Learn about threat detection

Audit Logs

Monitor user activity

Enterprise

See Enterprise features

Contact Sales

Discuss your requirements

​At a glance

​Security Certifications

​EU AI Act Alignment

​ISO/IEC 42001 Alignment

​Data Handling

​What Data We Process

​Data Flow

​Pass-Through Architecture

​Infrastructure Security

​Cloud Infrastructure

​Encryption

​Network Security

​Access Control

​Authentication Methods

​API Key Security

​Role-Based Access (Enterprise)

​Audit Logging

​What’s Logged

​Accessing Audit Logs

​Log Export (Enterprise)

​Incident Response

​Security Incident Process

​Reporting Security Issues

​Data Residency

​Current Regions

​Planned Regions

​Vendor Security

​Subprocessors

​LLM Providers

​AI Agent Governance

​Agent Identity — issuance and rotation (Partial)

​Behavioral Drift Detection

​Tamper-Evident Audit Trail

​Governance Reports

​Enterprise Security Features

​Security Questionnaire

​Responsible Disclosure

​Next Steps

Security Overview

Audit Logs

Enterprise

Contact Sales

At a glance

Security Certifications

EU AI Act Alignment

ISO/IEC 42001 Alignment

Data Handling

What Data We Process

Data Flow

Pass-Through Architecture

Infrastructure Security

Cloud Infrastructure

Encryption

Network Security

Access Control

Authentication Methods

API Key Security

Role-Based Access (Enterprise)

Audit Logging

What’s Logged

Accessing Audit Logs

Log Export (Enterprise)

Incident Response

Security Incident Process

Reporting Security Issues

Data Residency

Current Regions

Planned Regions

Vendor Security

Subprocessors

LLM Providers

AI Agent Governance

Agent Identity — issuance and rotation (Partial)

Behavioral Drift Detection

Tamper-Evident Audit Trail

Governance Reports

Enterprise Security Features

Security Questionnaire

Responsible Disclosure

Next Steps