Three applications.One governance workspace.
Each application has its own workflow for the team that uses it: AI governance, IT audit or business continuity. They run on one shared core, so organizations in KSA, the UAE and the EU can run all three without keeping people, access and audit trails in separate tools.
Pick the application you need, or all three
AI Governance, IT Audit and Business Continuity are separate applications with their own workflows. They run in the same workspace, with the same people, roles and audit trail.
Keep one register of the AI systems you build and buy, classify their risk, and assess them against the EU AI Act, NIST AI RMF, ISO/IEC 42001, OECD, KSA (SDAIA + PDPL) and UAE requirements. Incidents, human oversight decisions and policies are recorded alongside, so evidence is ready when someone asks for it.
What you can do
- AI system inventory with CSV and JSON bulk import
- Guided assessments across seven frameworks, with gap analysis
- Incident log, human oversight log and per-system evidence packages
- Policy templates, action plans and board-facing reports
Maintain an audit universe, run engagements with a defined scope and team, and build a risk and control matrix for each one. Record design and operating-effectiveness tests, turn exceptions into findings, and track findings through agreement and remediation to closure.
What you can do
- Audit universe of auditable entities with owners and risk ratings
- Engagements with scope, team and stages from planning to close; later stages are gated before they open
- Risk and control matrix, with design and operating-effectiveness testing
- Findings lifecycle and a printable engagement report
Record the business services that matter, run a versioned business impact analysis to set RTO, RPO, MTPD and MBCO, and see where a dependency cannot recover fast enough. Write continuity plans against each service, exercise them, and track the actions that come out.
What you can do
- Business services with criticality tiers and owners
- Versioned business impact analysis with RTO, RPO, MTPD and MBCO, and approval
- Dependency mapping that flags recovery conflicts before approval
- Versioned continuity plans and exercises with follow-up actions
Applications marked early access are working today and available to selected organizations while we finish them with early users. Request access and we will enable it for your workspace.