Regulatory coverage across
every framework.

Compliance claims are easy to inflate and hard to verify, so here is ours in a form you can check. The register below is not a logo wall. It is the set of obligations that shape the systems we build, grouped by how many sectors they cut across.

The distinction that matters in practice is between frameworks that govern data and frameworks that govern decisions. India’s DPDP Act governs data, and it reaches further into AI systems than most teams expect: training sets, prompts and stored outputs can all contain personal data, and prompt logs are the repository organisations most often forget they are accumulating. The EU AI Act governs decisions, classifying uses by risk, which is why a hiring screen and a marketing copilot built on the same model carry entirely different obligations.

Our position on the rest is straightforward. Governance written after deployment is documentation; governance designed alongside the system is a control, and only the second survives an audit. So the evidence pack, system inventory, risk classification, data provenance, model documentation, human oversight design, monitoring and incident procedure, is built as the system is built.