Trust & safetyGuardrails your
Guardrails your
auditor will like.
Write the rules once. Rheostat enforces them on every flag, every prompt and every agent action — and keeps the receipts.
Production policies
4 active- Block PII in agent outputs
- Daily spend cap
- Human approval above $250
- External email from agents
- Prompt changes need review
SOC 2
ISO
GDPR
HIPAA
CCPA
policy:name: refunds-need-a-humanapplies_to: agents/billing-*when:action: refundamount_usd: "> 250"then:require: approvalapprovers: [finance-oncall]timeout: 30m → denyaudit: forever
Policies live
in your repo.
- Reviewed like codePull requests, diffs and approvals — the same workflow as the rest of your stack.
- Tested before mergeReplay last week of traffic against a new policy and see what it would have blocked.
- Enforced at the edgeEvaluated in under 20 ms, before an agent’s action leaves your network.
Every change,
signed and kept.
Humans and agents write to the same log. Export it to your SIEM or hand it straight to an auditor.
| Time | Actor | Action | Result |
|---|---|---|---|
| 14:02:09 | Agentbilling-agent | refund $420 → approval requested | Held |
| 14:03:51 | Humanmaya.okafor | approved refund A-2291 | Approved |
| 14:10:22 | Agentoutreach-agent | email 1,200 customers | Blocked |
| 14:31:07 | Humandev.ramos | rollout new-checkout 5% → 25% | Applied |
| 14:32:40 | Systemrheostat | auto-rollback new-checkout → 0% | Applied |
Your data stays
where you put it.
EUFrankfurt
UKLondon
USVirginia
APACSingapore