We use a few strictly-necessary cookies, no marketing trackers, and cookieless analytics. Read our cookie policy, or pick a preference.
We use a few strictly-necessary cookies, no marketing trackers, and cookieless analytics. Read our cookie policy, or pick a preference.
AI governance documentation is not a formality; it is the mechanism by which organisations demonstrate that their AI systems are safe, transparent, and operating within the boundaries the regulation sets.
The EU AI Act does not exist to generate paperwork. It exists to ensure that AI systems affecting people's lives are documented, understood, and accountable. We take that seriously — and we built a platform that reflects it.
No team members to display.
What We Believe
Every security feature — SSO, MFA, comprehensive audit logging, tenant isolation, encryption at rest and in transit — is available to every customer on every plan. We will not use your compliance obligations as leverage to upsell you security.
The EU AI Act is 144 pages. Cross-referencing Articles, Annexes, and recitals is the platform's job, not yours. Every questionnaire section, every output, and every gap flag traces back to a specific regulatory obligation.
The AI Regulatory Navigator is advisory. It says so — clearly and persistently. Every citation is validated against the EU AI Act corpus before it reaches you. The formal risk classification is a separate, user-driven step.
All infrastructure runs in EU regions. All LLM inference uses the Anthropic EU endpoint. A GDPR Article 28 Data Processing Agreement is in place. EU data residency is the default and the only option.
Secure by Design
Built in accordance with NCSC Secure by Design principles. We take ownership of your security outcomes.
MFA enforced by default. Phishing-resistant MFA (passkeys, FIDO2) supported. SSO available at all tiers. No insecure configurations enabled by default.
Public vulnerability disclosure policy. Tenant-accessible audit logging with 10-year retention. No security theatre.
The burden of securing the platform sits with us. We report on our security posture publicly and respond to vulnerability reports within defined SLAs.