This project is not covered by Drupal’s security advisory policy.

MI Preflight: AI Content Compliance Gate for Drupal 11

AI-powered compliance gate for Drupal 11 that enforces Section 508, WCAG 2.1, PII and CUI detection, and federal content standards before content is published.

MI Preflight adds an automated compliance review layer to Drupal's Content Moderation workflow. It helps prevent non-compliant content from being published by scanning rendered pages against accessibility, privacy, and federal content standards before they go live.

When an editor clicks Save, MI Preflight renders the complete page including CSS, images, and layout into a single self-contained document. The rendered output is analyzed using AI against configured compliance rulesets.

If the content passes, moderation continues normally.

If the content fails, MI Preflight:

- identifies the compliance issues
- explains which rule was violated
- proposes specific fixes as a draft revision
- prevents publication until a human reviewer approves

This creates a pre-publication compliance gate that helps federal agencies and contractors reduce accessibility violations, privacy exposure, and policy violations before content becomes public.

Built for Federal websites, extensible for all websites.

MI Preflight includes 62 automated checks across 8 federal compliance rulesets commonly required for government websites and federal contractors.

Accessibility (Section 508 / WCAG 2.1)

Automated checks include:

- missing or low-quality alt text
- heading hierarchy violations
- improper ARIA usage
- insufficient color contrast
- keyboard navigation issues
- missing skip navigation links
- form label accessibility
- table header structure
- non-descriptive link text

PII Detection (Privacy Compliance)

Detects potential exposure of personally identifiable information, including:

- Social Security numbers
- passport numbers
- credit card numbers
- personal email addresses
- phone numbers
- home addresses
- medical information
- financial information
- biometric identifiers

Supports privacy practices aligned with:

- Privacy Act of 1974
- NIST SP 800-122

Plain Language (Plain Writing Act)

Checks readability and clarity requirements.

Rules include:

- reading grade level
- passive voice detection
- jargon detection
- sentence length
- nominalization detection

Supports compliance with the Plain Writing Act of 2010.

Controlled Unclassified Information (CUI)

Detects potential exposure of Controlled Unclassified Information, including:

- CUI markings
- export-controlled data
- ITAR references
- sensitive operational terminology

Aligned with 32 CFR Part 2002.

PDF Accessibility

Scans uploaded PDFs for accessibility issues such as:

- untagged PDFs
- missing reading order
- missing bookmarks
- missing form labels

This is one of the most common Section 508 compliance failures.

Document Security

Scans attachments for potential risks such as:

- embedded scripts
- macros
- sensitive metadata
- hidden content

External Link Compliance

Identifies issues including:

- missing exit notices
- possible commercial endorsement
- insecure external links

Prohibited Language Detection

Flags content containing:

- discriminatory language
- hate speech
- political advocacy
- other prohibited terms

Rulesets can be customized to match agency policy.

Ruleset Driven Architecture

MI Preflight is ruleset agnostic.

Administrators can define custom compliance rules using YAML or the built-in AI Ruleset Builder.

Organizations can enforce additional policies such as:

- brand guidelines
- SEO standards
- legal review requirements
- tone of voice
- internal content policies

Key Features

- Works with OpenAI (GPT-4o) or Anthropic (Claude)
- Self-contained HTML rendering so AI analyzes the page exactly as users see it
- AI generated fixes that create draft revisions for human review
- Per content type rulesets that allow different policies for different content
- Automatic revalidation when rulesets change
- Override workflow with full audit trail
- Compliance dashboard with pass/fail statistics and CSV export
- Document scanning for PDFs and Word documents
- Queue based asynchronous processing for scalability

Drupal 11 Native Architecture

MI Preflight is designed specifically for Drupal 11.

Features include:

- Content Moderation integration
- queue-based processing
- configuration schema
- PHP attribute hooks (#[Hook])
- no .module file required

The module runs entirely in PHP and has no system level dependencies, allowing it to run on:

- Pantheon
- Acquia
- Platform.sh
- AWS
- shared hosting

Who Should Use This Module

MI Preflight is useful for:

- U.S. federal agencies
- federal contractors
- research institutes
- national laboratories
- government university programs
- organizations subject to Section 508 or WCAG requirements

It helps reduce risk in environments where accessibility, privacy, and compliance requirements are mandatory.

Sponsored by Meier Innovation.
Professional support, custom ruleset development, and enterprise deployment assistance are available.

Supporting organizations: 
Funded and led the design and development of this module, informed by experience supporting large U.S. federal Drupal platforms.

Project information

Releases