Compliance for your AI agents.
Agents that touch money, customer data, or production are now in scope for your auditors. HiveKey maps scope, guard, and log onto the frameworks you already report against — and produces the evidence as agents act, not after.
Note: HiveKey is in private beta and not itself certified yet — these guides describe how the control plane helps you produce evidence for your own audits. Not legal advice.
Pick your framework.
Each guide maps the framework's relevant controls to scope, guard, and log — and lists the evidence you'll have on hand.
SOC 2
SOC 2 (Type II)
For SaaS & B2B vendors proving security to customers and their auditors.
SOC 2 for AI agentsHIPAA
HIPAA (Health Insurance Portability and Accountability Act)
For Healthcare and healthtech handling PHI with AI agents.
HIPAA for AI agentsGDPR
GDPR (General Data Protection Regulation)
For Any company processing EU residents' personal data with agents.
GDPR for AI agentsISO 27001
ISO/IEC 27001
For Companies running an ISMS who now have agents in scope.
ISO 27001 for AI agentsPCI DSS
PCI DSS (Payment Card Industry Data Security Standard)
For Anyone whose agents touch payment or cardholder-data flows.
PCI DSS for AI agentsEU AI Act
EU AI Act
For Organisations deploying AI systems for the EU market.
EU AI Act for AI agentsDORA
DORA (Digital Operational Resilience Act)
For EU financial entities and their critical ICT providers.
DORA for AI agentsNIST CSF
NIST Cybersecurity Framework 2.0
For Teams aligning their security program to NIST CSF.
NIST CSF for AI agentsGet audit-ready for your agents.
One policy, one immutable trail — the evidence your SOC 2, HIPAA, or GDPR audit needs for the agent layer.