Prerequisites

Before you begin using AI Guard, ensure you have the following prerequisites in place.

OneTrust Requirements

RequirementDescription
AI Governance SubscriptionAn active OneTrust AI Governance subscription is required
OneTrust API KeyAn API key with Data Discovery scope for SDK authorization. See Create an API Key
Light Worker NodeA deployed OneTrust Light Worker Node that hosts the AI Guard classification service. See Deploy the Light Worker Node

Development Environment

RequirementDetails
PythonVersion 3.13 or higher
pipPython package manager (included with Python 3.13+)
Network AccessYour application must be able to reach the AI Guard service endpoint (default port 4443)

SDK Dependencies

The AI Guard SDK automatically installs the following dependencies:

PackageMinimum VersionPurpose
cryptography43.0.0TLS certificate pinning
python-dotenv1.0.0Environment variable management
requests2.25.0HTTP client for API communication

Information You Will Need

Before integrating the SDK, gather the following from your OneTrust administrator:

  • AI Guard Service URL β€” The hostname or IP address and port of your AI Guard classification service (e.g., https://ai-guard.example.com:4443)
  • API Key (Bearer Token) β€” Your OneTrust API key with Data Discovery scope
  • Certificate Pin (optional) β€” If TLS certificate pinning is used, the base64-encoded SHA-256 hash of the server certificate's public key
  • Classification Profile UUID (optional) β€” If using a specific classification profile rather than the default
πŸ“˜

TLS Certificate Pinning

If your AI Guard service uses self-signed or internally-signed TLS certificates, your administrator will provide a certificate pin (pin_sha256) for secure communication. See TLS & Certificate Pinning for details.

Verify Your Environment

Run the following to confirm your Python version meets the minimum requirement:

python --version
# Python 3.13.x or higher required

Verify pip is available:

pip --version

What's Next?

Once you have the prerequisites in place:

  1. Create an API Key β€” Generate credentials for SDK authorization
  2. Deploy the Light Worker Node β€” Set up the classification service
  3. Install the SDK β€” Download and install the Python SDK

What’s Next

Once you have the prerequisites in place: