Question 1

What is AI agent governance?

Accepted Answer

AI agent governance is the practice of defining, enforcing, and auditing what AI agents are allowed to do in an organization. It includes policy rules (what actions are permitted), an audit trail (logging every agent action), and compliance reporting (proving adherence to regulations like the EU AI Act, SOC2, and HIPAA). InspectModular provides a governance layer that works with any AI agent via MCP.

Question 2

How does InspectModular comply with EU AI Act Article 12?

Accepted Answer

EU AI Act Article 12 requires high-risk AI systems to automatically record events throughout their lifetime. InspectModular satisfies this requirement by logging every AI agent action — including tool calls, file operations, policy checks, and session starts — to a tamper-resistant audit trail. Compliance reports can be exported for regulatory evidence.

Question 3

How do I add an audit trail to my AI agent?

Accepted Answer

With InspectModular, you add an audit trail to any AI agent in two steps: (1) Connect via MCP — paste the InspectModular config into your IDE (Cursor, Claude Code, VS Code, Windsurf, etc.) and every agent action is automatically logged. (2) For Python or Node.js pipelines, call the REST API or use the Primer SDK — one line of code instruments your entire agent session.

Question 4

What AI tools does InspectModular work with?

Accepted Answer

InspectModular works with any MCP-compatible AI tool: Cursor, Claude Code, Windsurf, VS Code (GitHub Copilot), Zed, Gemini CLI, and more. It also works with Python and Node.js AI pipelines via REST API, and with local models like Ollama and LM Studio.

Question 5

Is InspectModular compliant with SOC2 and HIPAA?

Accepted Answer

InspectModular helps organizations achieve SOC2 and HIPAA compliance for their AI agent usage. It provides the audit trail (access logs, action logs), access control (policy rules that block unauthorized actions), and compliance reporting needed to satisfy SOC2 Type II audit requirements and HIPAA security rule requirements for AI systems accessing patient data.

Question 6

How do I set policy rules for AI agents?

Accepted Answer

In the Primer dashboard, go to Policy → add rules. Each rule has a pattern (e.g. "delete *", "access production database"), an action (block or warn), a severity level, and a reason. When an AI agent calls primer_agent_check before performing that action, it will be blocked or warned according to your rule. Rules apply to all agents in your workspace immediately.

Docs are available to InspectModular customers.