Governance & Compliance

mkt36z includes enterprise-grade governance built in — hash-chain verified audit logs, PII detection, and content policy enforcement.

Audit Trail

Every API call, agent run, and policy event is logged with cryptographic hash-chain verification. Each entry references the previous entry's SHA-256 hash, making the log tamper-evident.

# View audit log (via API)
curl -H "Authorization: Bearer $API_KEY" \
  "https://api.mkt36z.com/api/v1/governance/audit?page=1&limit=50"

Audit Event Types

Action	Trigger	Description
`api_call`	Every successful API request	Method, endpoint, status code
`agent_run`	Each agent execution	Run ID, input type, topic
`pii_detected`	PII found in request body	PII types detected, request blocked

Hash Chain Verification

The audit endpoint returns a chain_valid boolean. If any log entry has been modified or deleted, the chain breaks and this returns false.

{
  "events": [...],
  "chain_valid": true,
  "pagination": { "page": 1, "limit": 50, "total": 142 }
}

PII Protection

The governance middleware automatically scans all POST/PUT request bodies for PII before processing. If PII is detected, the request is blocked with HTTP 422.

Detected PII Types

Type	Pattern
Social Security Number	`XXX-XX-XXXX`
Email addresses	Standard email format
Credit card numbers	16-digit card patterns
US phone numbers	Standard US phone formats
API keys	`sk_(live\|test)_` patterns

Content Policy

The policy engine checks generated content for:

Policy	Detects
Spam claims	"guaranteed results" and similar
Deceptive urgency	"act now or miss out" patterns
Misleading pricing	"100% free" and similar claims

Compliance Report

Get a summary of compliance metrics and usage analytics:

curl -H "Authorization: Bearer $API_KEY" \
  "https://api.mkt36z.com/api/v1/governance/report"

{
  "total_events": 142,
  "compliance": {
    "pii_detections": 3,
    "pii_block_rate": "100%",
    "policy_violations": 0
  },
  "usage_by_action": [
    { "action": "api_call", "count": 120 },
    { "action": "agent_run", "count": 19 }
  ]
}

Enterprise Governance Framework

mkt36z supports comprehensive governance across five pillars:

Brand Governance

Logo usage, voice consistency, messaging standards enforced across all generated content.

Compliance

FTC Act, CAN-SPAM, GDPR, CCPA, ADA/WCAG compliance checks built into the content pipeline.

Data Governance

Customer data classification, PII detection, and access controls at the API layer.

AI/LLM Governance

Model usage tracking, output review, cost controls, and full audit trails for every AI interaction.