Pre-launch · design-partner conversations openAEGIS · the all in one compliance suite

Compliance execution, automated. Expertise, elevated.

AEGIS is the all in one compliance suite that automates the operational load of compliance: board packs, regulatory returns, evidence and monitoring, produced continuously from your firm's own live control data. Your specialists move from data production to judgment and strategy, and the function stays ready the moment anyone asks.

One platform spanning 165 modules across every regulated area, covering the regulation and controls lifecycle end to end: horizon scanning, impact assessment, controls, continuous monitoring, evidence and assurance. Built for firms whose regulators expect evidence, not assertion. Every figure is traceable, every output reproducible, every decision signed.

Book a Demo
165
modules
13
caseload agents
200+
controls mapped
SHA-256
hash-chained ledger

Built for FCA, SEC, ECB, MAS, APRA, FINMA and DFSA, plus DORA, GDPR, MiCA, the EU AI Act, senior accountability regimes and more.

The operational load, handled.

The manual, repetitive work that consumes your team, produced continuously from your live data and ready on demand.

Quarterly board pack
Weeks of analyst time
Generated in seconds, narrated automatically
Regulatory returns
Days of manual rekeying
Populated automatically, gaps flagged
Examination evidence
Weeks of scramble
Maintained continuously, dossier on demand
Controls monitoring
Periodic manual sampling
Continuous controls monitoring on real data
Regulatory change
Reading publications by hand
Mapped to your controls, readiness scored
Client due diligence (DDQ)
Days answering questionnaires
Around 83% prefilled in minutes
Coverage assessment
Spreadsheet mapping of rules to controls
Regulation to control traceability, gaps visible live
Case letters and review packs
Hours of drafting and collating per case
Drafted by governed agents, a named colleague signs
Attestations and training
Chasing signatures by spreadsheet and email
Campaigns assigned, chased and acknowledged in one place
Regulator filings
Rekeying case facts into portal forms
SAR XML and return CSVs prepared from the recorded case. Your firm submits

Every output is produced from the firm's real control data and recorded in a tamper evident ledger, so it is evidenced, not asserted.

Built for the world's most regulated industries

FCA
SEC
ECB
MAS
APRA
FINMA
MiCA
DORA
NIST
ISO
GDPR
SOX
SFDR
//01The problem

Compliance Is Drowning Your Team

Manual Overhead

Your team loses a large share of its time to repetitive compliance work that AI can handle

Regulatory Complexity

40+ frameworks, multiple jurisdictions, 200+ controls, and growing every quarter

Talent & Cost Pressure

A mid-size compliance function can cost £1M+/year, and qualified officers are increasingly scarce

//02How it works

Five steps. Human approval at the gate.

AEGIS automates compliance change management end-to-end. Each step shows its work, citations, alternatives considered, confidence scores, anticipated CCO concerns pre-answered.

  • Detect
    Regulatory feed
  • Diagnose
    Impact analysis
  • Repair
    Drafts the edit
  • Verify
    Decision pack
  • Human gate
    Approve / reject
  • Apply
    Ledger anchored

Detect → diagnose → repair → verify → human approval → apply. Every step hash-chained in the audit ledger.

Step 1 · Detect·Polling FCA.org.uk · 14:23 BST
Publication
PS25/4 — Strengthening protections for vulnerable customers
Type
Policy Statement
Effective
01 Sep 2026
Impact tier
HIGH
Fictional FCA Policy Statement · ~15 seconds · no login needed.
//03And the broader platform

The same engine, applied across every compliance domain.

One detect-diagnose-repair-verify-apply engine. Twelve compliance domains. Every module runs on the same AI core, the same hash-chained audit trail, and the same approval gates.Click any card to see what the engine does in that domain.

//04The AI engines

Over 11 AI Engines, working alongside your team.

Each engine is purpose-built for a specific compliance task, from SAR drafting to board reporting. New engines ship every quarter; the ones below are live today.Click the arrows to browse, or hover the edges. Click any engine for the deep dive.

//05The agent fleet

Agents take the caseload. Your team keeps the judgement.

Thirteen governed agents draft the routine casework from your recorded data: complaint letters, KYC and KYB review packs, SAR quality checks, STOR sections, forbearance letters and regulator responses. A named human reviews and signs every one.

Complaints handler

Triage, the DISP clock and both letters, drafted from the recorded case. Your officer reviews, personalises and signs.

Deadline sentinel

Sweeps every statutory clock daily, across modules, and opens owned tasks before anything is missed. Fully deterministic, no AI in the clock.

SAR quality reviewer

Checks each narrative against the recorded case facts and flags anything unsupported before the MLRO signs. It never files anything.

Surveillance triage

An advisory read on each alert, plus STOR sections drafted from what the system recorded. Escalation stays a firm decision.

Incident notifier

Notification clocks computed from recorded timestamps, with drafts for the ICO, the FCA or DORA. Your firm confirms which regimes apply.

Regulatory change to action

Turns an assessed rule change into a remediation plan, then a policy redline. Tasks are created only after a manager approves.

Every agent runs with a budget cap, a kill switch and a full record on the tamper evident ledger. Multi step tasks are planned against a governed capability catalogue, with step by step provenance for every run. Agents draft and prepare. A named human approves every letter, filing and decision.

//06Evidenced, not modelled

Every number traces to real control data.

Most regtech shows you a score. AEGIS shows you the score, the register it came from, and whether it's live data or a projection. That is the difference between a dashboard and a defensible position.

Six measured early warnings

Senior accountability, financial crime, operational resilience, conduct, complaints and cyber. Each forecast runs on the firm’s real, maintainable register, not a modelled demo, and is snapshotted daily into recorded history.

Examination Mode

One click produces an evidenced regulator dossier per topic: live readiness, recorded forecast trajectories, the supporting record counts and a tamper evident hash. The document you hand a supervisor.

Board Assurance Pack

An MBB grade landscape deck (PDF and PPTX) assembled from the measured spine: risk heat map, prioritisation, decision asks and an automatically written executive narrative. White label to your firm in one toggle.

Regulation to control traceability

One map from each regulation through its obligations to the controls, evidence and verdicts that cover it. Coverage is computed from your registers: covered, partial or unmapped, with drift flags and orphan controls surfaced. AI suggested mappings never count as coverage until a reviewer approves them.

Regulatory Returns Automation

Regulatory returns are populated automatically from live registers, every field tagged populated, needs input or gap. Consistency checked. Never fabricated.

Regulatory Change Readiness

When a rule changes, see your data driven readiness against it, computed live from your control data (for example, 62% ready, 3 of 8 services breaching tolerance), with remediation in a click, not a manual checklist.

Live regulator feeds

Publications from the FCA, PRA, ESMA, EBA, MAS and HKMA flow into horizon scanning and enforcement news on a set schedule, and every item links back to the source publication.

Four GRC registers

Controls, obligations, risk and regulatory breach in one connected set of registers. Risk is scored on likelihood and impact, with residual scoring and a heat map. Breach records support SUP 15 record keeping, and comments and assignments keep the work moving as a team.

Document Review Grid

Drop in a set of documents and get one row per document and one column per check. Every finding is cited to a verbatim passage, and the platform verifies that passage against the source before presenting it as evidence.

Posture history, measured daily

A measured compliance posture score is snapshotted every day, building a real history over time. History is never back filled, so the trend you show the board is the trend that actually happened.

Honest provenance, everywhere

Every prediction carries a clear live data or sample label, with recorded or projected history. Daily snapshots accrue into a hash chained ledger a regulator can replay. No black box.

//07Shipped in the last month

The platform compounds. Here is one month.

Everything below is live in the product today, built on the same registers, the same tamper evident ledger and the same approval gates as the rest of the platform.

Attestation campaigns

Assign policy attestations and training to named people, chase the stragglers by email, and let each person acknowledge from their own queue. Every acknowledgement lands on the audit ledger.

Anonymous whistleblowing portal

A public speak up link that works without a login. Reports land in the whistleblowing register, and the reporter can check back with a case reference and passcode. The passcode is shown once and never stored, only a salted hash.

Comms and promotions register

Every client communication and financial promotion in one durable register with an approval workflow. Scan verdicts are saved with their provenance, and a record that has never been scanned says so.

Third party risk in one place

Vendor due diligence questionnaires, vendor to service dependency mapping and criticality together. Prepare a CSV aligned to the DORA Register of Information from the recorded vendors, for your review before anything reaches a regulator.

Regulator filing preparation

NCA SAR Online XML, SAR filing packs and the FCA financial crime and complaints return CSVs (REP CRIM and DISP), prepared from your recorded cases. Fields that cannot be truthfully populated are left empty, never invented. AEGIS prepares. Your firm submits.

Inline payment decisioning

An API your payment system calls before releasing a payment: allow, review or block, computed from the sanctions and fraud verdicts the platform already produces. Deterministic policy, no model calls. If screening is unavailable the answer is review, never allow by default.

SIEM delivery

Platform events delivered to Splunk or Datadog on a cursor. The cursor advances only after a confirmed delivery, so your SOC never silently loses a window.

Readiness simulation

Ask what if before you commit: close a number of gaps or tighten tolerances and see readiness recomputed with the same formula the live probe uses. Deterministic, never a made up curve.

Peer benchmarking

Your metrics against an anonymised peer median with quartiles. A hard anonymity gate: below five contributing firms the aggregate is withheld entirely. No values, no hints.

Traceability SpineMap

The whole estate on one map: regulations to obligations to controls to evidence to coverage verdicts. Every node is a live register row, and unmapped obligations and orphan controls sort to the top so problems stay visible.

Agent Studio

Build your own agents bound to document vaults, the document library and the registers. Grounding is honoured at runtime: every source is cited, and an agent that found nothing says so rather than implying it did.

Draft from document

Drop a document on the breach, penalty, conflicts, SMCR or disclosure register and get a prefilled draft. Every extracted value is verified as a verbatim quote from the source; values without a verified quote are flagged or dropped.

Vulnerable customer detection

Candidates surfaced from data already in AEGIS: arrears cases, payment records and complaints. The sweep is deterministic, every candidate carries its verbatim evidence, and only an officer decision puts anyone on the register.

Unified deadline timeline

Every statutory clock across modules on one timeline. One lane per module, colour coded by urgency, with click through to the owning page.

Push API and live adapters

A signed push API for your core banking or CRM to write into AEGIS registers, plus Companies House entity lookup. TrueLayer and Experian adapters are shipped in the build and go live the moment your credentials are set.

Regulatory judgement stays with your firm throughout: AEGIS drafts, prepares and surfaces, and a named person at your firm reviews, decides and submits.

//08The numbers

How much more can your team handle with AEGIS?

We don't model redundancies. The numbers below show how much extra workload your existing team absorbs, what next-hires you avoid, and what incumbent tooling you consolidate.

Senior judgement, SMF accountability, and supervisory engagement stay with humans. AEGIS takes the artefact production, monitoring, and reporting load off the team.

We quote per firm, so there is no list figure here. Enter the annual budget you have in mind and the numbers below net it off. Leave it blank to see savings before platform cost.

Your Capacity Profile

Compliance Platform

Current Annual Compliance Cost

£1,690,000

20 staff × £65,000 salary × 1.3 overhead

Workload Cost Absorbed Per Year

£980,200

~58% of the workload absorbed on Compliance Platform · £709,800 of people cost stays with your team

Capacity multiplier

2.4×

Your team handles 2.4× the workload before needing the next hire.

Hires avoided

15

over 3 years

Avoided cost

£980k

per year, before platform cost

Payback

enter a budget to see this

How we calculate: AEGIS automates ~58% of artefact production, monitoring, and reporting work at your tier. We express the absorbed workload as avoided next hires (not redundancies) and avoided cost (not headcount cuts). Senior judgement, SMF accountability, and supervisory engagement stay with your people. Tooling consolidation (typically two to three incumbent vendors) is on top. Platform cost is quoted per firm; enter your own budget above to net it off.

Get Your Quote
//09Deployment

Live in weeks, not years

1

Connect

Connect your existing GRC tools, document stores and data sources — API-based sources in days

2

Configure

Select your frameworks, jurisdictions, and risk appetite. AI maps your control environment automatically

3

Comply

Real-time monitoring, automated reporting and AI-powered insights once your data is connected

0

Compliance Modules

0

Sidebar Sections

0+

Regulatory Frameworks

0

Substrate-Wired AI Engines

//10Packages

Replaces 2–3 vendors. One contract. Cancel anytime after year 1.

Start with a 12-week Pilot for a fixed fee, or pick a full tier. Seats follow three-lines-of-defence: Operator, Approver, Observer.

Generous bundled seats on every tier so the board, audit and business lines see compliance posture daily. Every engagement is quoted for your firm: tell us your team size, regulators and incumbent stack and we come back with a number.

Typical net saving

1.5–3× your platform fee

Saving scales with compliance team size and how many incumbent tools you consolidate. The calculator below personalises this to your firm.

Assumes two to three incumbent tools displaced plus avoided headcount. Fine avoidance not counted; conservative.

1Choose Your Platform Tier

Determines which domains, AI flows, and enterprise features your firm can access

Pilot

12-week proof-of-value · one module · one regulator

Custom pricing
Fixed fee · 12 weeks · credited on conversion
1 domains
2 AI flows
99.5% SLA

Fixed-fee 12-week engagement. Pick one module, one regulator, up to 10 users. Includes implementation, data load, and a board-ready evidence pack at week 8. Upgrade credit applies if you continue to a full tier.

Start a Pilot

Compliance Domains

  • Pick 1 module from the catalogue
  • Up to 10 users (any persona mix)
  • Hash-chained audit substrate from day one
  • 1 regulator (FCA, DFSA, MAS, SEC or ICO)
  • Implementation + data load included

AI Flows

  • 25k AI invocations / month bundled (fair use 50M tokens)
  • Ask AEGIS assistant — ledger-grounded Q&A
  • SAR drafter or DDQ engine (pick one)

Platform

  • Audit log explorer
  • Daily 07:00 UTC email digest
  • Sample data + onboarding wizard
  • Shared Slack support channel
  • Week-8 regulator-grade evidence pack
  • Fee credited 100% against Year 1 on conversion

Compliance Operator

For single-regulator firms

Custom pricing
Annual platform fee plus seats, quoted for your firm
4 domains
4 AI flows
99.5% SLA

Single-regulator coverage for EMIs, PIs, small wealth managers, single-regime crypto firms. Hash-chained substrate from day one, no upgrade needed for the audit trail.

Book a Demo

Compliance Domains

  • Four core domains unlocked: governance and SMCR, financial crime, regulatory intelligence, policy management
  • SHA-256 hash-chained audit substrate
  • SAR pipeline + KYC + screening
  • Single regulator (FCA, DFSA, MAS, SEC or ICO)
  • Up to 25 bundled users (any persona mix)

AI Flows

  • 50k AI invocations / month bundled (fair use 100M tokens)
  • Ask AEGIS — ledger-grounded Q&A (read-only tools)
  • Risk Radar — predicted-failure early-warning (read-only)
  • SAR drafter · gap analysis · doc analyser

Platform

  • Audit log explorer (PR LL)
  • What-changed daily feed (PR RR)
  • Why-did-this-fire AI explainer (PR QQ)
  • 4-eyes approvals (basic, fixed roles)
  • Daily 07:00 UTC email digest
  • Onboarding wizard + sample data seed
  • 5 standard integrations
Most Popular

Compliance Platform

For mid-tier banks & multi-regulator firms

Custom pricing
Annual platform fee plus seats, quoted for your firm
10 domains
12 AI flows
Contractual SLA

Ten compliance domains from the 165 module catalogue, with configurable 4-eyes, eval harness, regulator-grade evidence packs. Consolidates board portal, fincrime case work, and security-evidence tooling into one contract.

Book a Demo

Compliance Domains

  • Ten compliance domains unlocked (see the coverage matrix)
  • SHA-256 hash-chained audit substrate
  • Up to 3 regulators and 3 entity workspaces (one per legal entity or booking centre)
  • Up to 100 bundled users + observer fleet
  • Configurable 4-eyes (PR OO) with delegation-aware routing
  • Regulator inbox (PR HH), webhook + manual paste

AI Flows

  • 250k AI invocations / month bundled (fair use 400M tokens), overage packs available
  • Ask AEGIS copilot — read + write tools, 4-eyes-gated, every answer ledger-cited
  • Risk Radar — full early-warning across controls, policies & processes
  • Document Library + RAG — answers cited to your own corpus
  • Predictive Breach & Health Score (deterministic) + agent eval harness

Platform

  • Per-artefact evidence packs (PR KK)
  • Out-of-office delegations (PR II)
  • Cross-module Cases (PR FF)
  • SLA engine with critical email alerts (PR GG)
  • Configurable approval policies
  • 15 integrations
  • SSO + SCIM (Okta / Entra)
  • Dedicated CSM + quarterly business reviews

Compliance Operating System

For tier-1 banks, listed groups, and systemically important firms worldwide

Custom pricing
Scoped to your group, division by division
15 domains
18 AI flows
Enhanced contractual SLA

Base fee plus seat bands, scoped to your group. Dedicated environment with BYOK, field level redaction, JIT access. Global banking groups are configured by division and seats, entered through a scoped proof of concept.

Talk to Us

Compliance Domains

  • Everything in Platform, plus:
  • Unlimited users across all personas
  • Unlimited regulators
  • Dedicated environment + custom data residency
  • BYOK / per-tenant KMS-backed encryption
  • Field-level redaction by role
  • Just-in-time access (break-glass with approver)
  • Regulator inbox with dedicated inbound address (OAuth mailbox watching on the roadmap)

AI Flows

  • AI volume contracted to your group, with overage packs
  • AI-driven predictive — Predictive Breach (AI) + Health-Score trajectories
  • Custom risk models + golden sets per agent
  • Adversarial replay benchmarking + Anthropic/fallback routing (BYOK)
  • Custom agent training

Platform

  • Custom workflow builder + forms primitive
  • Unlimited integrations + private API
  • Regulator submission rails (FCA Connect, NCA, DFSA ePass)
  • White-glove implementation (12-16 weeks)
  • Dedicated 24×7 incident response (contract commitment)
  • SOC 2 evidence room + DORA TPRM pack
  • Annual independent penetration testing (contract commitment)

2Persona Seats, Three-Lines-of-Defence Aligned

Bundle includes generous Observer seats for the wider firm (board, audit, RMs). Pay overage only above your tier's bundle. Seat rates are quoted with your platform tier, at a typical 15 / 25 / 60 mix.

Domain Coverage Matrix

Modules grouped across 15 compliance domains, see what each platform tier includes

DomainModulesFoundationProfessionalEnterprise
Governance, SMCR & Accountability7
Financial Crime, AML & Sanctions9
Regulatory Intelligence & Horizon10
Policy & Document Management15
Retail Lending & Credit6
Consumer Duty & Retail Conduct22
Data Protection & GDPR5
Operational Resilience & DORA5
Payments, CASS & Prudential9
ESG & Sustainable Finance2
Digital Assets & Crypto11
Markets, Trading & Surveillance14
Corporate & Wholesale Banking8
Multi-Entity & Group4
AI & Model Governance21
Total Modules1484190148

Need a custom configuration? Multi-entity pricing, data residency, or bespoke SLAs, we tailor every enterprise deployment.

Common questions

Honest answers to what compliance leaders and procurement teams ask first.

Product & honesty

Is this production-ready, or a prototype dressed up?
Production-ready for a design-partner cohort: multi-tenant architecture, hash-chained audit substrate, Anthropic-grounded AI engines, 4-eyes approval flows, SSO/SCIM, structured logging, Sentry, circuit breakers. Open about what is still in build: a small subset of connectors, specific regulator submission rails, and ISO 27001 (in progress, not certified). Not yet production-ready for a tier-1 bank under a multi-year contract — and we will say so if asked.
How is this different from us using ChatGPT for compliance?
Three differences. Grounding: every AEGIS output is cited to your tenant data and the regulator rule text, not a generic LLM response. Audit: every AI decision lands on a SHA-256 hash-chained ledger a regulator can replay end-to-end — ChatGPT cannot show its work. Integration: AEGIS is wired into your modules, your approvals, your audit pack. It is not a chat window; it is the substrate.
Will this replace my compliance team?
No. Realistic impact is that 30–40% of artefact production, monitoring, and reporting work is absorbed by the platform — that is analyst-level workload, not senior judgement. Your SMFs, your oversight, your investigators stay. What changes: the same team handles 1.5–2× the workload before needing the next hire. We frame it as capacity, not headcount.

Trust & security

Are you ISO 27001 certified?
Not yet — and we won’t imply otherwise. Our ISMS is being built on our own ISO 27001 module (we run on our own product), with the Statement of Applicability and control evidence maintained there continuously; certification is planned and funded by our design-partner programme. Current evidence is reviewable under NDA, and for contracts that require certification we’ll agree the commitment and timeline in the contract itself.
Are you using customer data to train AI models?
No. AEGIS uses the Anthropic Claude API, which does not train on data submitted through it. Customer data is never used to train any model — ours or Anthropic’s. Anthropic provides a written commitment. Your data is processed for inference only and discarded after the response. Substrate storage of inputs and outputs is for audit trail purposes and stays in your tenant’s region.
Where is the data hosted?
Hosted in EU West (Ireland) today. That single region holds your data and backups. UK, DIFC (UAE), Singapore, and Hong Kong regional deployments are on our roadmap; our subprocessor register tracks the current position. If your regulator needs data kept in a specific region, ask us about timelines for that region before you commit.
How would a regulator audit a decision made by AEGIS?
Every material decision is an artefact with the inputs, the AI response with citations, the human approver, the timestamp, and a SHA-256 hash linking into the audit chain. We issue Regulator Demo Tokens — time-boxed read-only URLs giving examiners access to nominated artefacts without provisioning user accounts. Substrate replay reproduces any decision from its inputs.

Getting started

How long does implementation take?
4–6 weeks for Foundation, 8–12 weeks for Platform, 12–16 weeks for Enterprise (white-glove). The Pilot tier runs as a 12-week fixed-fee engagement with a board-ready evidence pack delivered at week 8. Timelines assume customer-side resources for data load and integration testing — we provide playbooks for each tier and run weekly checkpoints.
What if we do not see value in 6 months?
Foundation and Platform contracts include a 90-day value checkpoint with named success criteria — failure triggers fee suspension and a remediation plan. Enterprise contracts include termination-for-convenience after year 1 with prorated refund. Pilot tier fees credit against the platform fee if you continue. We do not hide behind multi-year lock-ins.
Can we keep our existing data providers?
Yes. AEGIS ships with built in sources, including regulator publication feeds and the public OFSI and UN consolidated sanctions lists, and each built in source can be switched off per workspace. If you already licence a provider you prefer, keep it and turn the overlapping AEGIS source off. The rest of the platform works the same either way.
Can we start with a pilot?
Yes. The Pilot tier is a 12-week fixed-fee engagement covering one module and one regulator with up to 10 users. Includes implementation, data load, and a regulator-grade evidence pack at week 8 to take to your board. If you continue to a full tier, the pilot fee credits against the platform fee.

Have a different question? Talk to us.

Ready to Transform Your Compliance?

Replace spreadsheets and manual processes with AI-powered compliance intelligence, every action audit-anchored, every recommendation explainable.

Book a Demo
AEGIS by Hu — the all-in-one compliance suite for regulated firms