What Aicura does and doesn't do

Why this page exists

Marketing for governance and compliance tooling tends to overclaim. It talks about "automating compliance", "AI-powered compliance scores" and "certification-grade audit trails". Aicura is deliberately built to refuse those claims, because they are false in ways that hurt the people who believe them. This page exists so you can decide, before you buy, whether you want a tool that refuses them.

What Aicura does

• Finds the AI you run. Discovery reads the sources you connect and proposes what it finds for a person to add, link or ignore.
• Keeps a register of your AI systems and agents, each with owners and a version history, so you know what exists and who answers for it.
• Assesses each system and agent, with risk and impact assessments whose output is guidance for your judgement. Nothing in Aicura approves or refuses a system.
• Reviews documents you upload, such as privacy policies and governance policies, against the frameworks your plan includes, and returns specific recommendations.
• Generates drafts, such as disclosures, model cards (a plain summary of what a model is for and where it falls short), policy drafts and board reports, that your team reviews, edits and accepts.
• Enforces the rules you publish on live AI traffic, through a gateway that runs in your own environment, and records what each rule did.
• Records the work as it happens, so you can show what was decided, by whom and when.

What Aicura doesn't do

• Doesn't compute compliance scores. There is no number in the product that tells you what percentage compliant you are, because that number cannot be true and we refuse to fabricate it.
• Doesn't show governance progress bars. A bar that claims you are 80% done with governance needs a denominator that nobody can know, so it would be lying to you.
• Doesn't certify or vouch for you. Certification is a formal process performed by accredited third parties, and Aicura is software, so it doesn't qualify. Aicura's risk assessments support your governance work and are not an assessment in the formal regulatory sense. Where the product records an attestation, that is your own accountable owner formally confirming their own work. Aicura never attests to anything, and the Evidence Vault keeps locked snapshots of what happened rather than vouching for it.
• Doesn't provide legal advice. Aicura's outputs are generated from Aicura's reading of the frameworks. Your lawyers are responsible for legal advice. Aicura is designed to make their job faster, not to replace it.
• Doesn't guarantee the AI got it right. Every AI-generated output is a draft and every draft needs human review. The product says so at the point of generation, not in the terms of service.
• Doesn't publish anything without your say-so. Aicura drafts. Your policy goes live through your own publishing process, and a Trust Centre page or a guardrail release goes live only when one of your people publishes or deploys it.
• Doesn't benchmark you against other customers. We don't tell you what organisations like yours typically have, and we don't use your data to feed anyone else's dashboard.
• Doesn't guarantee regulatory coverage. Aicura covers the specific frameworks your plan includes, not everything that might apply to your organisation. Identifying the obligations that apply to you is your responsibility.

Why these boundaries are features

Every boundary on this page is a place where a different company would be tempted to overclaim, because overclaiming closes bigger deals faster. We don't, because the people who use Aicura spend their days telling their own organisations not to overclaim. Selling them a tool that does exactly that would be a bad business model.

The plain version, where Aicura supports the work and your people make the decisions, is slower to sell. It produces a working relationship that lasts and a product the people building it can defend. Both matter.

What to do if you want more than this

Aicura is not the right tool for every buyer. Three things people sometimes want are better found elsewhere.

• A certified artefact you can hand to a regulator. That's a law firm or an accredited certification body.
• A scoring dashboard that gives executives a green light. That's a different category of product, and we think you should be careful before you buy one.
• A fully automated compliance process with no human review. That doesn't exist, and no product delivers it, including the ones that claim to.

If you want a working environment that makes your organisation's actual governance work faster, Aicura is that.