plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "guard-grc",
  "version": "2.0.0",
  "description": "Manage your organisation's AI governance and compliance in GUARD from ChatGPT: AI system inventory, risk assessments, policies, regulator documents and approvals.",
  "author": {
    "name": "GUARD GRC L.L.C-FZ",
    "url": "https://aigovernance.ae"
  },
  "homepage": "https://aigovernance.ae",
  "license": "LicenseRef-GUARD-GRC-Proprietary",
  "keywords": [
    "ai-governance",
    "compliance",
    "grc",
    "regulation",
    "eu-ai-act",
    "gdpr"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "GUARD GRC",
        "shortDescription": "AI governance and compliance",
        "longDescription": "GUARD GRC is an AI governance and compliance platform. This plugin lets you manage your organisation's AI governance in GUARD from ChatGPT, under your own GUARD login with two-factor sign-in.\n\nAsk in plain words and ChatGPT works in GUARD for you:\n- keep your AI system inventory current and have each system's risk classified under the regulations that apply;\n- run a guided assessment of your company or of one AI system, then read its report and the gaps it found;\n- generate a policy from the gaps you choose, and track its implementation plan action by action;\n- prepare a DPIA, FRIA, privacy notice, AI transparency statement or DIFC Regulation 10 statement;\n- build a regulator response pack and read your AI register as data;\n- see what is waiting for your approval, request a sign-off, and prepare an approval you then confirm in GUARD;\n- search the regulations GUARD holds and check a regulation's exclusions for your kind of business;\n- see the regulatory changes GUARD has published and why they matter to you.\n\nEverything ChatGPT does is stored in GUARD exactly as if you had used the GUARD app, checked against your role, and recorded as done through ChatGPT. Approvals and rejections are confirmed by you on a GUARD page with a fresh code from your authenticator app; deleting records and changing your team stay in the GUARD app.\n\nRequires a GUARD account with two-factor sign-in. Answers are ChatGPT's reading of GUARD's content; they are not legal advice.",
        "developerName": "GUARD GRC L.L.C-FZ",
        "category": "Business & Operations",
        "websiteURL": "https://aigovernance.ae",
        "supportURL": "https://aigovernance.ae/contact/",
        "privacyPolicyURL": "https://aigovernance.ae/privacy",
        "termsOfServiceURL": "https://aigovernance.ae/terms",
        "defaultPrompt": [
          "What is waiting for my approval in GUARD?",
          "Add our customer chatbot to the GUARD inventory and classify it.",
          "Does the UAE PDPL exclude free-zone companies?"
        ],
        "logo": "./assets/logo.png"
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "See which GUARD organisation you work in",
              "prompt": "Which GUARD organisation am I in, and what is my role?",
              "tools_triggered": "list_organisations",
              "expected_behavior": "Names the reviewer organisation (Cedar & Pine Logistics, GUARD review demo) and the reviewer's role."
            },
            {
              "description": "Check whether a regulation applies, with its exclusions",
              "prompt": "Does the UAE Personal Data Protection Law exclude free-zone companies?",
              "tools_triggered": "search_regulations, find_carveouts",
              "expected_behavior": "Quotes the relevant article of the UAE PDPL from GUARD's regulation library and names the exclusion with its source."
            },
            {
              "description": "Add an AI system to the inventory",
              "prompt": "List our AI systems in GUARD, then add one called Invoice Reader, made by Acme, used by the finance team.",
              "tools_triggered": "list_ai_systems, add_ai_system",
              "expected_behavior": "Lists the organisation's AI systems, adds Invoice Reader and gives its GUARD link; the new system appears in GUARD marked as added via ChatGPT."
            },
            {
              "description": "Write a policy from assessment gaps",
              "prompt": "Draft a policy in GUARD that closes the two highest-risk gaps from our latest assessment.",
              "tools_triggered": "list_assessments, list_gaps, generate_policy, get_guard_job",
              "expected_behavior": "Names the two gaps, starts the policy in GUARD, checks back after one to three minutes and shows the start of the finished policy with its GUARD link."
            },
            {
              "description": "See what waits for approval and prepare a decision",
              "prompt": "What is waiting for my approval in GUARD? Prepare my approval of the AI use policy.",
              "tools_triggered": "list_my_todos, prepare_signoff_decision",
              "expected_behavior": "Lists the waiting items and gives a GUARD link; the decision is confirmed only on GUARD's page with a fresh authenticator code (for this review account the page explains it cannot approve). Nothing is approved in the chat."
            }
          ],
          "negative": [
            {
              "description": "General writing, not a GUARD task",
              "prompt": "Write a short privacy notice for my bakery's website."
            },
            {
              "description": "General AI news, not the organisation's GUARD data",
              "prompt": "What did OpenAI announce this week?"
            },
            {
              "description": "Summarising an attached file without saving it anywhere",
              "prompt": "Summarise the attached contract in five bullet points."
            }
          ]
        }
      },
      "publication": {
        "release_notes": "First release. Connect ChatGPT to GUARD with your own GUARD login and two-factor sign-in, and manage your organisation's AI governance from ChatGPT: AI system inventory and classification, guided assessments, policies and implementation plans, regulator documents and response packs, sign-offs and to-dos, regulatory search and regulatory changes. Approvals are confirmed in GUARD with a fresh authenticator code."
      },
      "apps": "./.app.json"
    }
  }
}