Docs/Platform/Services Reference
Services Reference
Configuration and operational reference for each GovernanceAI microservice.
Advanced6 min readUpdated June 2026
GatewayPolicyRiskDLP
GovernanceAI runs as fourteen independent microservices. Each can be scaled, restarted, and deployed independently. This page documents each service, its port, environment variables, and health endpoint.
Service directory
| Service | Port | Purpose | Health |
|---|---|---|---|
| api-gateway | 8000 | Public entry point, auth, orchestration | /health |
| policy-service | 8001 | Rule evaluation and RBAC enforcement | /health |
| risk-scorer | 8002 | ML-based prompt risk classification | /health |
| dlp-scanner | 8003 | Regex-based DLP and PII detection | /health |
| decision-engine | 8004 | Merges enforcement decisions | /health |
| audit-service | 8005 | Append-only audit log writer | /health |
| tenant-service | 8006 | Org, project, and API key CRUD | /health |
| profile-service | 8007 | Security profile management | /health |
| provider-adapter | 8008 | LLM provider routing and failover | /health |
| notification-service | 8009 | Webhook and alert delivery | /health |
| platform-assistant | 8010 | LLM-powered DevEx assistant | /health |
| security-assistant | 8011 | Threat analysis and red-team reports | /health |
| red-team-simulator | 8012 | Adversarial attack simulation | /health |
| metrics-service | 8013 | Prometheus metrics aggregation | /metrics |
Environment variables
All services share a common set of environment variables in .env:
# Database DATABASE_URL=postgresql://user:pass@localhost:5432/governance # Redis REDIS_URL=redis://localhost:6379 # Security JWT_SECRET_KEY=your-secret-key-min-32-chars ENVIRONMENT=production # disables dev bypasses # LLM Providers OPENAI_API_KEY=sk-... ANTHROPIC_API_KEY=sk-ant-... GROQ_API_KEY=gsk_... GOOGLE_API_KEY=AIza... # Feature flags RATE_LIMITING_ENABLED=true DLP_REDACTION_MODE=block # block | redact | warn
Starting all services
docker compose up -d # Check all services are healthy docker compose ps
Health monitoringUse
GET /health on each service for basic liveness. The gateway aggregates all service health into its own /health response. In production, configure your load balancer to use these endpoints for automatic instance rotation.