@ai-act-guard/node

Official Node.js & TypeScript SDK for AI Act Guard (ai-act-guard.eu).

Turnkey middleware and telemetry SDK for EU AI Act compliance under Article 50 (Transparency Disclaimers & Marking), Article 14 (Human Oversight / HITL), and Article 12 (Record-Keeping & Technical Documentation).

🚀 Installation

npm install @ai-act-guard/node

⚡ Express.js Quickstart

import express from 'express';
import { aiActGuardExpress } from '@ai-act-guard/node';

const app = express();

// Apply AI Act Guard middleware to AI routes
app.use('/api/chat', aiActGuardExpress({
  apiKey: process.env.AI_ACT_GUARD_KEY, // Get API key from https://ai-act-guard.eu/keys
  injectHeaders: true,
  autoDetectAI: true,
  hitlEnabled: true, // Article 14 Human-In-The-Loop tracking
  userConsentObtained: true, // GDPR & Article 50 user consent
}));

app.post('/api/chat', (req, res) => {
  res.json({ text: "AI generated response" });
});

🏷️ Injected Response Headers

When middleware intercepts an outgoing AI response, it injects the following compliance headers:

• X-AI-Generated: true
• X-AI-Act-Jurisdiction: EU
• X-AI-Event-Id: evt_9a82f102-1204 (Use to match with internal DB logs)
• X-AI-Act-Compliance-Id: comp_823f0a12c4
• X-AI-HITL-Oversight: enabled
• X-AI-User-Consent: verified

🔗 2-Way Event Traceability

Developers can link telemetry records to their internal application logs in two ways:

1. Extract Header: Read res.headers['x-ai-event-id'] from responses.
2. SDK Return Handle:

   const { eventId, complianceId } = guard.recordEvent({
     model: 'gpt-4o',
     promptTokens: 142,
     completionTokens: 288,
   });

📄 License

MIT © 2026 AI Act Guard (ai-act-guard.eu)