The principle we build on
A model can draft, screen and explain. It cannot hold the obligation. AIRAS Cloud routes every consequential judgement to a named, competent person and keeps the evidence of who decided, on what basis and when.
Built and operated in Ireland · EU-hosted · Enterprise-grade
AIRAS Cloud Solutions brings discovery, assessment, human decisions and board evidence together. Our purchased Shadow AI tooling is included in the AIRAS Cloud full licence.
AI governance portfolio
Northfield Group · All departments · Ruleset v2.4
Total AI use cases
64
Registered across 9 departments
Awaiting review
8
3 approaching due date
High risk
6
All with active conditions
Evidence completeness
91%
Across approved records
12
Periodic review, condition expiry and vendor change checks.
Illustrative interface – synthetic data
Engineered for regulated enterprise
Backed by an independent university-led security and code assurance programme.
AIRAS Cloud in action · 3 minute film
See the register, assessment and human decisions that bring accountable AI governance together.
Illustrative demonstration · Irish-accented AI narration · English captions available
Acquired by AIRAS · Included in the full licence
AIRAS has purchased the Shadow AI tooling. It is now formally part of AIRAS Cloud Solutions, included in the AIRAS Cloud full licence and also available on its own. A significant investment in dedicated discovery strengthens our end-to-end offering, from overlooked AI to an accountable decision.
Find the AI tools, models and agents in use across your organisation, including the ones nobody registered.
Human-confirmed findings enter governed intake on a named person's request, with assessment informed by ARIE.
A named, accountable person approves, restricts or retires each use, with their reasons recorded.
Signed, tamper-evident records ready for your board, auditors and regulators.
Buy AIRAS your way
The full licence includes everything, Shadow AI too. Or start with ARIE, Shadow AI, the Evidence Vault or the AI Register, and add more whenever you need.
AIRAS Cloud Full Licence
The whole AI governance platform. Every product, one record.
ARIE Risk Assessment
Deterministic EU AI Act reasoning you can defend.
Shadow AI Discovery
See the AI your people already use.
Evidence and Audit Vault
Proof on demand, not a scramble before the audit.
AI Register and Obligations
Know what you run, who owns it and what it owes.
AIRAS Cloud is founded on experience delivering complex technology, governance and transformation programmes across regulated and enterprise environments.
Aer LingusAviation
AvolonAviation leasing
AIBBanking
Bank of IrelandBanking
IBMTechnology services
KyndrylTechnology services
EirGridCritical infrastructure
Virgin MediaTelecoms
Irish GovernmentPublic sectorThe problem
Governance rarely fails at the policy layer. It fails in the operating layer, where assessing, reviewing, evidencing and monitoring actually happen. AIRAS Cloud is that layer.
01
What AI are we actually using?
Systems, models, agents and embedded vendor features arrive faster than any policy cycle. Without one authoritative register, nobody can answer the first question truthfully.
02
Who said yes, and on what basis?
Decisions get made in meetings, inboxes and slide decks. AIRAS Cloud puts the decision where the assessment is, with named accountability and segregation of duties.
03
Can we show our working next year?
Regulators, auditors and boards do not ask what you intended. They ask what you assessed, what you controlled and what you retained.
How AIRAS works
Select a stage to see what the business does, what AIRAS Cloud does and what evidence remains on the record afterwards.
Create a reliable inventory of AI use cases, systems, models, agents, vendor features and owners.
Typically involves: Business Owner, AI Governance Lead
Platform and engine
AIRAS Cloud governs the lifecycle. ARIE supplies the regulatory reasoning. People remain accountable for the decision. Three distinct responsibilities, deliberately kept apart.
Layer 01
The governed control plane
Orchestrates the lifecycle: who owns what, what has been assessed, which controls apply, who reviewed it, what was decided and what evidence is retained.
Layer 02
The deterministic regulatory engine
Applies approved, versioned regulatory logic to the recorded facts and returns a classification, the applicable obligations and a readable explanation trace that can be re-run.
Layer 03
Authorised people, not models
ARIE never approves anything. Material decisions stay with authorised people, recorded against the assessment version they actually saw.
Proof, not promises
Two of the mechanisms at the heart of AIRAS Cloud: a deterministic risk engine with a readable explanation trace, and an append-only decision and audit record.
Base calculation returned Medium. A regulatory floor for GxP-impacting use raised the band to High.
Routed to Quality, Cybersecurity and Privacy. Segregation of duties enforced: the submitting owner cannot approve this record.
Rules are versioned and human-approved. AI does not approve AI.
Illustrative interface – synthetic data
Every dimension scored under approved, versioned rules — with floors, prohibited-use checks and the reason the outcome was reached.
H. Okonkwo · Approved with conditions
L. Fereday · Approved
A. Marchetti · Approved with conditions
S. Nairn · Final approval
Conditions: quarterly output sampling, documented human review of all customer- facing outputs, and reassessment on model or vendor change.
14 Mar 09:41 — Decision recorded: Approved with conditions (v3)
13 Mar 16:02 — Condition added: quarterly output sampling
13 Mar 11:20 — Evidence attached: DPIA-0431 v2
12 Mar 08:55 — Risk recalculated under ruleset v2.4
Append-only. Entries cannot be edited or deleted.
Illustrative interface – synthetic data
Reviewer decisions, conditions and rationale versioned against the record, with an exportable assessment and decision pack.
AIRAS Cloud maintains a controlled assurance programme supported by an extensive automated verification and regression estate, executed against the source tree and a running build, with results recorded as evidence rather than described in copy.
Native safe source unit/integration suite; two workers, default 5-second test timeout. All three database suites excluded. Not a browser, live deployment or independent assurance result. Focused scopes are subsets, never added to the full suite. Internal QA is not an external penetration test, certification or independent assurance.
Independent recognition · 2026
AIRAS Cloud has been officially approved as a finalist in the Best Company Awards 2026 and invited to participate in its Official Honoree Program. For a young AI governance company, we see this as an encouraging external signal that the direction, execution and ambition behind AIRAS Cloud are being noticed.
2026 Best Company Awards Finalist · Official Honoree Program
Congratulations to our Co-Founder and Chief Product Officer on her nomination at the Women in Tech & AI Global Awards 2026, and her WomenTech Network Certificate of Appreciation. The people who designed AIRAS Cloud and its ARIE engine are the people you speak to.
View Amy’s nominationBook 20 minutes with Richie or Amy. We will show you how AIRAS finds your AI, assesses it and turns it into accountable, board-ready decisions.
No commercial commitment. No confidential information required.
Free eBook · 28 pages
What the EU AI Act means after 2 August 2026 — and the practical steps Irish organisations should take next. Written by our founder, Richie Higgins. No form, no paywall.