Skip to main content

Compliance Templates

OpenProxyAI ships three pre-built policy templates as a starting point for regulated environments. These are policy configuration templates you apply and enforce yourself — not a claim that OpenProxyAI itself holds a corresponding certification. Your own audit still runs against your own controls.

Applying a template

POST /api/v1/organizations/current/policy/apply-template

Available templates are listed at /api/v1/organizations/current/policy/templates. Applying a template merges its defaults into your org's existing policy configuration — it does not silently overwrite policies you've already customized.

Healthcare (HIPAA-aligned)

  • PHI redaction defaults tuned for clinical data
  • Model allowlists restricting which models can see patient data
  • Extended audit retention

Finance (PCI-aligned)

  • Cardholder-data blocking
  • Transaction-context logging
  • Stricter default rate limits

Government (FedRAMP-aligned)

Customizing after applying

A template is a starting point, not a lock-in. After applying one, individual policies can still be switched between enforce and log-only, and thresholds adjusted, via /api/v1/organizations/current/policy — see Policies & Guardrails.