AI governance platform
The AI governance platform for the whole job.
Aicura is an AI governance platform for organisations in Norway. It finds the AI you run, assesses every system and agent, enforces your rules where the traffic flows, and supports the work the GDPR asks of you today and Norway's AI Act will add.
Self-serve up to Essentials. Larger organisations, contact us.
The platform
How Aicura works
Aicura finds the AI you run, assesses it, enforces your rules on live traffic and reports on all of it, with a sealed history of the work underneath.
AI register
Every AI system and agent you run, whether discovery found it or someone on staff asked for it. Each has a named owner. Switch the model underneath it and Aicura keeps the old version and starts a new one.
Assessments
Know what could go wrong before it does. A risk assessment rates each system, lists its risks and suggests a control for each one. An impact assessment sets out who is affected and how. Both guide your judgement.
Guardrails and gateway
Someone pastes a customer's email address into a prompt, and it is masked before it leaves your network. Your rules run on a gateway you host, which allows, redacts or blocks each request and holds each system to its budget.
Monitoring and automatic responses
An agent starts calling a tool nobody approved, overnight. An alert opens, and Aicura responds only as far as you allow, from telling the owner to acting straight away. A response can re-run the risk assessment, so production feeds back into the rating.
Oversight and trust
A committee decides on a new use of customer data, and the decision stays tied to the charter it was made under. Aicura drafts the quarterly board report from the record as it stands today, a Trust Centre page shows customers the AI you use, and the Evidence Vault holds a dated snapshot of each step.
The history. Governance decisions and enforcement actions are snapped into a sealed, timestamped history as the work happens. Nobody files anything by hand.
Norway
What is coming up for organisations in Norway
The GDPR already governs AI in Norway, and the EU AI Act is on its way through the EEA. These are the instruments that matter, with what each asks of you.
Where your data is hosted
Aicura is hosted on AWS in Sydney, Australia, for every customer worldwide, and the AI it uses runs on Amazon Bedrock in Australia. Your data does not stay in Norway or the EEA. Transfers out of the EEA are covered by our data processing agreement, which includes the EU Standard Contractual Clauses (Module Two). Your governance data is not used to train models.
How we handle dataUsing AI under Norway's Personal Data Act
How Norwegian organisations should assess generative AI and other AI tools under the Personal Data Act and GDPR, drawing on Datatilsynet's sandbox work.
Read the guideWays to start
Start on the free plan and add more as you grow
Register
Find the AI already in use and give every system an owner. Pick common tools from the library and their details fill in for you. Audit log, and system and agent reports included.
Sign upPrivacy
Review your privacy policy against the automated decision-making frameworks for your country, with suggested wording for any AI system it does not yet disclose.
Sign up for PrivacyEssentials
Know the risks of each system and what to do about them. Risk assessments with suggested controls, policies and templates, model cards that describe each system, disclosures of the decisions it makes, and guardrail rules you write.
Sign up for EssentialsPro and Enterprise
Put your rules on live traffic. The gateway in your network, monitoring and automatic responses, limits on what agents can do while they run, incidents, board reports and the Trust Centre.
Contact usLearn
Understand AI governance before you buy anything
Questions about Aicura in Norway
Does the EU AI Act apply in Norway?
Not yet. Norway is in the EEA, so the AI Act applies once it is incorporated into the EEA Agreement and implemented through KI-loven, Norway's AI Act. The government plans a new consultation in autumn 2026 and aims to present the bill to the Storting in spring 2027. Norwegian firms selling AI into the EU can be caught by the EU AI Act directly.
Does Aicura help with the GDPR when using AI in Norway?
Yes. Discovery and the AI register show which AI tools are in use and what personal data they touch, assessments hold a DPIA for each purpose, and guardrails enforce your rules on what staff enter. It supports the work and the decisions stay with you.
Where is Aicura hosted for Norwegian organisations?
Aicura is hosted on AWS in Sydney, Australia, for every customer worldwide, and the AI it uses runs on Amazon Bedrock in Australia. Transfers from Norway are covered by our data processing agreement, which includes the EU Standard Contractual Clauses (Module Two). Your governance data is not used to train models.
What does Aicura cost in Norway?
Prices are in Norwegian kroner and exclude VAT. The AI register is free at its smallest size, and the pricing page shows every plan and size.
Start with what you're running
Connect your sources, see what Aicura finds, and take each system from the register to enforcement at your own pace.