Step 1 — paste your policy
Open AgentPolicy and paste your company policy text. It can be messy prose — a refund policy, an HR guideline, a safety rule. AgentPolicy reads the text and extracts the enforceable statements rather than asking you to write rules from scratch.
Example input:
All refunds over $50 require manager approval. No PII may leave the EU.
Step 2 — pick a domain
Select the policy domain — Finance, HR, Safety, or General. The domain shapes how rules are interpreted (a finance approval threshold is different from a safety interlock), and it scopes the EU AI Act articles the rules map to.
Step 3 — review the generated checks
AgentPolicy returns agent-callable policy checks:
if refund > $50 then require manager_approvalif data_subject in EU then block transfer outside EU region
and a compliance checklist that maps the high-risk rules to obligations (Art. 14 oversight, Art. 9 / Chapter IV data governance).
Step 4 — export and wire
Export the rules file and wire it into your agent's runtime so every run evaluates the conditions. Wire the high-risk rules to human approval or a block, and log every decision. Re-run the extraction after any prompt or tool change.
An honest limit
AgentPolicy reduces obvious failure modes and makes obligations visible. It does not guarantee the agent is compliant, and it is not a legal opinion. Conformity stays the deployer's responsibility across the full system.
Authoritative references
- EU AI Act (Reg. 2024/1689): https://eur-lex.europa.eu/eli/reg/2024/1689/oj
- AI Act explorer: https://artificialintelligenceact.eu/
- European Commission AI policy: https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai