How it worksUse casesFrom SOP to rulesPlatformFor sponsor banks Start a free risk assessment
From your SOPs, agreements and policies to your agent's authority

Your SOPs, agreements and policies already say what the agent may do. Now it's enforced.

Proviguard reads your procedures, the policies behind each use case, your sponsor-bank program agreement and your data-processing terms clause by clause. Approval tables become the agent's limits, prohibitions become blocks, and deadlines become tracked obligations. Every rule stays tied to its clause and to the person who approved it.

SOP-PAY-002 · Refunds · v3Read clause by clause
§2Agents may refund up to $500. Up to $5,000, a supervisor approves. Above that, the Head of Payments.AUTHORITY
§4Refunds go only to the original payment method.EXISTING CONTROL
§5Refund disputes are answered within 10 business days.OBLIGATION
§6An agent may not refund an account it opened a dispute on.NEW RULE
§7Refund activity is reviewed monthly.NOT AT THE ACTION
§2 becomes the refund agent's authority ↓
RefundApproverSource
Up to $500Agent alone§2, v3
Up to $5,000Supervisor§2, v3
Above $5,000Head of Payments§2, v3
Every clause gets an outcome

Nothing is quietly skipped, and nothing pretends to be enforced.

Each clause is placed in one of five outcomes. Your compliance team sees the full list and decides what goes live.

AUTHORITY

Limits and approvers

An approval-authority table becomes the agent's limits: what it does alone, and who approves above each band.

NEW RULE

Prohibitions and required steps

"Never…", "only after…", "only to…" become checks that hold or block the action before it runs.

EXISTING CONTROL

Already covered

A clause your current rules already enforce is linked to them, not duplicated.

OBLIGATION

Deadlines and duties

Recorded against the document they came from, so your team can see and act on them.

NOT AT THE ACTION

Listed, not faked

Monthly reviews, retention and training don't happen when an agent acts. They're listed as a position you're taking, not a gap you didn't know about.

Your agreements bind your agents too

Hold your agents to what you signed.

Your sponsor bank's program agreement and your vendors' data-processing terms already decide what your agents may do. When an agent breaks them, it's your breach. Proviguard reads the clauses that apply at the moment an agent acts, and enforces them like any other rule.

Program agreement with your sponsor bank
§9.2 Changes to complaint and dispute handling require the Bank's prior written approval. agent changes a dispute-handling procedure → hold until the bank's approval is recorded source Program Agreement §9.2 · executed v4
  • The bank sees its own clause behind each hold
  • Fintechs stop learning about breaches in the next audit
Data-processing terms with your AI vendors
§4 Customer data may be processed only in the US, by the subprocessors listed in Schedule 2. agent sends a customer record to a model provider not in Schedule 2, or outside the US → block source DPA §4, Schedule 2 · in force
  • Customer data reaches only the vendors you contracted
  • Your privacy team's answer, enforced on every call
How a clause goes live

Read. Test. Approve. Enforce. Trace.

01 · READ

Every clause, its outcome

From your document as written, with the exact sentence each rule came from.

02 · TEST

On your real traffic

See what the rule would have done to last month's actions before it can stop anything.

03 · APPROVE

Never on one person's word

Someone other than the author approves each rule. Every change is a new version.

04 · ENFORCE

Before the action runs

The agent's call runs, waits for the named approver, or is declined.

05 · TRACE

Every decision cites its clause

Asked why an agent was stopped, you show the sentence, the version and the approver.

Why not just put it in the prompt?

A procedure only matters if the agent can't talk its way past it.

Giving the model your SOPs helps it do the work. It isn't a control you can rely on.

SOP in a documentSOP in the promptSOP through Proviguard
Does the agent follow it?It can't read your wiki when it actsUsually, until it reasons around it or is talked out of itChecked before every action, outside the model
Who approved it?Whoever wrote itWhoever edited the promptTested, then approved by someone other than the author
When it changesAgents don't knowSomeone edits every promptChanged clauses re-read and re-approved
When someone asks whyNo link to what happened"The model decided"The clause, version and approver behind the decision

In our testing, a rule written into the prompt held until one note in the case record said "pre-approved". Then every model we tested credited the money itself, in up to 30 of 30 runs. Enforced outside the model, the rule held every time. Read the research

Documents change

The rules follow.

New version, new review

Only the changed clauses are read again. The new version is approved before its rules apply, and the old rules keep running until it is.

Expired means expired

Owners are told before an agreement ends. Rules that cite a document no longer in force are flagged for the team to resolve.

Past decisions stay explainable

A clause a past decision relied on is kept, so every decision can still be traced to the words it ran under.

Two ways to start

Bring your own procedures, or start from ours.

Your documents

The SOPs & agreements you already follow

Upload them, or sync them from where they live, starting with Notion. A document whose words change gets a new version, never a silent edit.

  • SOPs and procedures
  • Policies for any workflow your agents run
  • Approval-authority tables
  • Sponsor-bank program agreements
  • Data-processing and vendor terms
Starter SOPs

A sample procedure to edit

Disputes, payment operations and agent-initiated payments each come with a sample SOP and sensible limits. Edit it, and it becomes your procedure and your agent's authority.

  • Samples, not legal advice
  • Your values, your approvers
Who uses it

The people who answer for the rules

  • Compliance and risk: procedures enforced as written, with a clear list of what can't be
  • Operations: change the SOP, approve the new version, and every agent follows it
  • Legal: agreements confirmed before they apply, expiry tracked
  • Engineering: business rules out of the agent code and prompts
Thirty minutes, one procedure

Bring one SOP or agreement. We'll turn a clause into your agent's authority on the call.

A procedure, your program agreement, or one of our starters. You leave with the clause outcomes and a rule you can see run.

Starter SOPs are samples to edit into your own procedures. Proviguard is not legal advice and does not make a program compliant.