# GaaS — Governance as a Service for AI Agents

> GaaS is a governance pipeline that sits between an AI agent's intent and its execution. It enriches context, evaluates policy, deliberates risk via multi-agent panels, and produces an immutable audit trail. Sub-100ms for routine actions. Full multi-agent deliberation for high-stakes decisions. Built by H2Om. See [full documentation](https://gaas.is/llms-full.txt) for complete technical details.

GaaS solves a critical problem: autonomous AI agents are acting in the world — sending emails, executing transactions, accessing records, posting content — and the governance model for most of them is "hope the prompt was good enough." GaaS provides the institutional checks that every hospital, bank, and trading floor requires of human employees, but for AI agents.

12 compliance frameworks, 60+ governance policies built in. Patent pending (provisional filed March 2026).

The governance pipeline has five stages: Intent Declaration (< 5ms), Context Enrichment (< 50ms), Policy Evaluation (< 10ms), Deliberation Engine (200ms–5s, only for high-risk), and Decision + Audit (< 25ms). 85–95% of actions are routine and complete in under 100ms. Only 5–15% trigger full multi-agent deliberation.

Integration requires three lines of code. SDKs available for Python, TypeScript, and Java. Framework plugins for LangChain, AutoGen, and CrewAI. REST/HTTPS protocol with JSON payloads.

## Main Pages

- [Homepage](https://gaas.is): Product overview, governance pipeline visualization, core principles, integration examples, trust tiers
- [Control What Your AI Agents Do](https://gaas.is/control-your-agents): Plain-language operator overview — before an agent sends, posts, orders, or touches a record, GaaS allows it, fixes it, holds it, or blocks it against your rules, with a receipt for every decision
- 27 native production connectors across enterprise, IoT, smart home, agriculture, energy, and education platforms
- [For Agents](https://gaas.is/for-agents): Page written directly for AI agents — explains GaaS value proposition from the agent's perspective, context window savings, integration examples, trust tiers, FAQ
- [Pricing](https://gaas.is/pricing): Plans with included actions, per-decision overage in three classes, interactive calculator, fairness rules
- [For AI Operators](https://gaas.is/for-operators): Top-of-funnel hub for anyone running agents — the allow/modify/hold/block lens, the four operator doors, pricing posture, full FAQ
- [For Content & Social Agencies](https://gaas.is/for-agencies): Enforced AI content approval workflow — every agent-written post checked against brand and claims rules before it publishes
- [Start Shadow Mode](https://gaas.is/start): Free 14-day shadow deployment — full pipeline, real actions, zero enforcement
- [For Parts & Purchasing](https://gaas.is/for-purchasing): Control an AI purchasing agent — orders verified for correctness and gated over your dollar threshold before money moves
- [For Healthcare & HIPAA](https://gaas.is/for-healthcare): PHI detected and blocked before messages leave, minimum necessary enforced, immutable audit trail; HIPAA among 12 built-in frameworks
- [For Retail & Customer Service](https://gaas.is/for-retail): AI customer service guardrails — prices, promises, discounts, and refunds kept inside policy, off-policy offers blocked
- [API Documentation](https://gaas.is/api-docs): REST API reference with endpoints, request/response schemas, SDK examples
- [What Is GaaS](https://gaas.is/what-is-gaas): Plain-language pillar — the problem (agents act, prompts hope), the move (the check lives outside the agent), and the how, with the one-sentence definition up top
- [Governance as a Service](https://gaas.is/governance-as-a-service): The term itself, defined — the -aaS pattern applied to governance, the four meanings of the term (AI agent, data, GRC, cloud), why agents made governance a runtime problem, the arXiv:2508.18765 research formalizing the same definition, all 12 named regulatory frameworks, the first-week rollout, and the plan ladder with nonprofit/NGO/veteran free-for-life pricing
- [What Is AI Agent Governance](https://gaas.is/what-is-ai-agent-governance): The category explainer, decoupled from the product — the quotable definition, the five capabilities, and governance vs guardrails vs alignment vs observability
- [How It Works](https://gaas.is/how-it-works): Three steps — install the SDK (3 lines), set rules in plain language, let the gate decide in under 100ms; Shadow Mode first
- [A2A Protocol Governance](https://gaas.is/a2a-protocol/): GaaS as the governance layer for Google's Agent-to-Agent protocol — policy evaluation, risk scoring, audit trails for A2A interactions
- [Technical Specifications](https://gaas.is/tech-specs): Architecture deep-dive — control plane, inference plane, pipeline internals, and system design
- [Trust, Audit & the Spec](https://gaas.is/trust): The immutable record explained (hash-chained, DLT-anchored, signed verdicts; free forever) and the auth.md open convention for readable agent governance, with GaaS as reference runtime
- [About GaaS](https://gaas.is/about-gaas-and-how-GaaS-governs-agentic-AI): Visual explainer of how GaaS governs agentic AI — no code required
- [The Context Dividend](https://gaas.is/context-dividend): Why moving governance outside the agent returns 30–60% of its context window — 23,000–65,000 tokens per cycle for prompt guardrails vs 200–500 with GaaS
- [Careers](https://gaas.is/careers): Open roles at GaaS — currently hiring a Post-Quantum Cryptographer (Encinitas, CA; on-site, full-time); applications accepted exclusively through LinkedIn, no email or agency channel

## Blog

- [Agentic AI Governance: The Infrastructure Gap Nobody's Filling](https://gaas.is/blog/agentic-ai-governance/): Why autonomous AI agents need institutional oversight, the self-governance fallacy, and what a governance pipeline looks like
- [AI Governance Pipeline: The Selective Membrane for Autonomous Agents](https://gaas.is/blog/gaas-pipeline/): The membrane metaphor — how governance pipelines act as selective barriers between agent intent and execution
- [Who Holds the Evidence? Governing AI Agents You Didn't Build](https://gaas.is/blog/who-holds-the-evidence/): Why a hash-chained audit log proves nothing was altered after capture but cannot prove capture was faithful — integrity and faithful capture are orthogonal axes, and independence is a structural position rather than a schema field
- [The EU AI Act and Your AI Agents: What Actually Applies Right Now](https://gaas.is/blog/eu-ai-act-ai-agent-logging/): A dated, source-stamped map of which AI Act obligations are live as of 1 September 2026 — Article 50 transparency in force since 2 August 2026, high-risk and Article 12 logging deferred to 2 December 2027 and 2 August 2028 by Regulation (EU) 2026/1744
- [Control Your AI: Trust It When You Are Not Looking](https://gaas.is/blog/control-your-ai/): Control is knowing, not hoping — the line you draw once that an agent cannot cross, and why holding rules outside the AI pays you back (also a standalone page at https://gaas.is/control-your-ai)

## Documentation & Resources

- [OpenAPI Spec](https://gaas.is/openapi.yaml): Machine-readable API specification (OpenAPI 3.1)
- [The Context Dividend (White Paper)](https://gaas.is/the-context-dividend.pdf): How externalizing governance reclaims 30–60% of an agent's context window
- [GitHub](https://github.com/H2OmAI): Source code and SDK repositories
- [API Endpoint](https://api.gaas.is/v1/onboarding/quickstart): POST endpoint for onboarding (accepts email, org_name, description; returns api_key, membrane_id, quickstart_snippet)
- [The Context Dividend v2 (HTML)](https://gaas.is/the-context-dividend-v2): Interactive web version of the white paper

## Pricing

- Free: $0 — 1K actions/mo, 1 agent, for evaluation and small-scale testing
- Developer: $99/mo — 10K actions, 3 agents
- Starter: $500/mo — 50K actions, 3 agents
- Growth: $2,500/mo — 500K actions, 15 agents
- Enterprise: $10,000+/mo — 5M+ actions, unlimited agents, custom SLAs, annual
- The above are GaaS Complete (deliberation inference included, run by us)
- GaaS Core (BYOM): same pipeline, deliberation runs on your own model endpoint, 30% lower platform fee — Starter $350/mo (50K actions, 3 agents), Growth $1,750/mo (500K actions, 15 agents), Enterprise custom. Core starts at Starter; Free and Developer are managed-inference only. Deliberation tokens are billed by your own provider.
- Overage beyond included actions, per decision in its highest class — Complete: Routine $0.002 · Deliberation $0.05 · Escalation $0.25; Core (BYOM): Routine $0.0015 · Deliberation $0.01 + your tokens · Escalation $0.25 (escalation is identical because human review involves no model compute)
- Fairness rules: shadow/test decisions never metered; a failed deliberation bills as routine; each decision counts exactly once; the audit record is never metered (record-free-forever pledge)
- Overage metering currently runs in report-only mode; activation is announced in advance

## Key Concepts

- [Bidirectional Governance](https://gaas.is/#bidirectional): Outbound (govern your agents) and Inbound (protect your digital property from visiting agents)
- [Trust Tiers](https://gaas.is/#trust-tiers): Registered → Verified (30-day compliance) → Certified (independent audit)
- [Five-Stage Pipeline](https://gaas.is/#pipeline): Intent Declaration → Context Enrichment → Policy Evaluation → Deliberation Engine → Decision + Audit
- [Shadow Mode](https://gaas.is/start): Full governance pipeline without enforcement — observe before activating
- [Compliance Frameworks](https://gaas.is/tech-specs#compliance): 12 frameworks (EU AI Act, GDPR, HIPAA, PCI DSS, SOC 2, NIST 800-53, FedRAMP, CMMC, NIST CSF, NIST AI RMF, FERPA, COPPA)
- [Security](https://gaas.is/tech-specs#security): Prompt injection detection (17 signatures), behavioral anomaly governance, SIEM integration (CEF format)
- Patent Pending: Provisional patent filed March 2026 covering the multi-stage governance pipeline architecture

## Markdown Versions (for LLM consumption)

- [Homepage](https://gaas.is/index.md)
- [Pricing](https://gaas.is/pricing.md)
- [Start Shadow Mode](https://gaas.is/start.md)
- [API Documentation](https://gaas.is/api-docs.md)
- [For Agents](https://gaas.is/for-agents.md)
- [A2A Protocol](https://gaas.is/a2a-protocol/index.md)

## Optional

- [Sign Up](https://the.gaas.is/signup): Create an account