Archer, GRC provider, has launched Archer Evolv AI Compliance, a product designed to convert the regulations and internal policies that bind an enterprise into runtime controls that stop non-compliant AI prompts before a model can answer them.

The launch addresses a problem facing businesses that now operate two AI workforces at once: staff who feed contracts, customer records and source code into large language models and copilots, and autonomous agents acting on the company’s behalf at machine speed.

Risk, compliance and security teams already own the policies covering this activity, but they have had no way to apply those rules at the moment a prompt reaches a model.

Archer Evolv AI Compliance translates obligations into approved Amazon Bedrock Guardrails, which are deployed natively within each customer’s own AWS account. Each control links back to the obligation that created it, and every breach is logged in the customer’s existing GRC system of record.

Archer argues that much of this year’s AI governance debate has focused on access, such as identity and zero trust, which determines who may reach a system rather than whether a given action is permitted.

A user or agent can be properly authenticated and still submit a prompt that breaches an untranslated regulation. The company positions its product as the link between policy repositories and runtime guardrails, giving the CRO, CCO and CISO shared enforcement and real-time risk visibility from a single platform.

The product operates as a five-stage loop. It first converts regulations, privacy sources and company policies into tracked controls, drawing on Archer’s library of 22 million regulatory documents maintained by legal experts.

Source link