Prove what your AI agents did.
To any regulator.
Aira is the authorization and audit layer for AI agents. Gate actions with policies, sign outcomes with Ed25519 receipts, and hand regulators cryptographic proof — not log files.
EU AI Act Article 12 deadline: August 2, 2026. DORA is active now. One-click compliance bundles mapped article-by-article.
pip install aira-sdk|npm install aira-sdkfrom aira import Aira
aira = Aira(api_key="aira_live_...")
# Step 1 — authorize before executing
auth = aira.authorize(
action_type="wire_transfer",
details="Send €75,000 to vendor X",
agent_id="payments-agent",
)
if auth.status == "authorized":
result = send_wire(75000, to="vendor")
# Step 2 — notarize the outcome, mint receipt
receipt = aira.notarize(
action_uuid=auth.action_uuid,
outcome="completed",
outcome_details=f"ref={result.id}",
)
# receipt.signature → Ed25519
# receipt.verify_url → public, no auth neededWhat Aira does
Policy Engine
Four policy modes that stack: rules, AI, consensus, content scan. Block unauthorized agent actions before they execute.
LLM Gateway
Route any LLM call through Aira with one URL change. Every request scanned and receipted.
Human Approval
Hold actions for human review. Secure approval links, multi-approver rules, dashboard queue.
Cryptographic Receipts
Ed25519-signed, RFC 3161-timestamped. Hand a regulator a URL — they verify without an account.
Code Governance
Enforce policies on every PR. Inline review comments, multi-model consensus, auto-merge.
Content Scanner
PII, credentials, prompt injection — 30+ patterns on inputs and outputs. Flag, deny, or redact.
Drift Detection
Behavioral baselines from production history. KL divergence scoring catches silent changes.
Agent Identity
W3C DID for every agent. Key rotation. Verifiable Credentials. Reputation scores.
Self-Hosted
Single docker compose up. Data never leaves your network — critical for DORA third-party risk requirements.
Compliance
EU AI Act
Art. 6, 9, 12, 14, Annex IV — mapped article-by-article. One-click evidence bundles for your next audit.
DORA
ICT incident lifecycle, third-party risk register, resilience testing. Evidence your DFS regulator expects.
Compliance Bundles
Merkle-rooted, signed PDF exports. EU AI Act, DORA, ISO 42001, SOC 2 CC7 — regulator-ready in minutes.
Integrations
API Reference
Built for EU AI Act · DORA · SR 11-7 · ISO 42001 · SOC 2 CC7 · GDPR