AI governance platform

The AI governance platform for the whole job.

Aicura is an AI governance platform for UK organisations. It finds the AI you run, assesses every system and agent, enforces your rules where the traffic flows, and supports the work UK GDPR's new automated decision rules and your sector regulator expect of you.

Self-serve up to Essentials. Larger organisations, contact us.

Your AI estateGovernance moments are snapped into the Evidence Vault

Illustrative estate

Follow a scenario

AicuraMonitoring and automatic responsesYour networkOutside

Running nowMicrosoft 365 CopilotCollections assistantGitHub CopilotPeople and agents making calls

Model providersMicrosoft, OpenAI, Anthropic, AWS Bedrock, Google

Traffic, all the timeRules, when you publishData, back from your networkResponses reach back

AI register

Found by discovery or asked for by staff

Found by discoveryCMDB, GitHub, Fleet, cloud

Asked for by staffAI use requests

AI register60 systems and agents

Assessments

Risk and impact

Collections assistantHigh · 13 items

Microsoft 365 CopilotHigh · 14 items

Guardrails and gateway

Rules down to your network

Guardrails and budgetsRules v10 deployed

People and agentsMaking calls

Gateway in your networkAllows, redacts, blocks

Model providersAllowed calls only

Monitoring and automatic responses

What your network reports back

MonitoringSignals

AlertsWait on a person

Automatic responsesAt the level you choose

Oversight and trust

What you hand over

Board reportQ3

Trust CentreYour register today

ReportsPoint-in-time documents

Evidence packSealed for sharing

The platform

How Aicura works

Aicura finds the AI you run, assesses it, enforces your rules on live traffic and reports on all of it, with a sealed history of the work underneath.

AI register

Every AI system and agent you run, whether discovery found it or someone on staff asked for it. Each has a named owner. Switch the model underneath it and Aicura keeps the old version and starts a new one.

Assessments

Know what could go wrong before it does. A risk assessment rates each system, lists its risks and suggests a control for each one. An impact assessment sets out who is affected and how. Both guide your judgement.

Guardrails and gateway

Someone pastes a customer's email address into a prompt, and it is masked before it leaves your network. Your rules run on a gateway you host, which allows, redacts or blocks each request and holds each system to its budget.

Monitoring and automatic responses

An agent starts calling a tool nobody approved, overnight. An alert opens, and Aicura responds only as far as you allow, from telling the owner to acting straight away. A response can re-run the risk assessment, so production feeds back into the rating.

Oversight and trust

A committee decides on a new use of customer data, and the decision stays tied to the charter it was made under. Aicura drafts the quarterly board report from the record as it stands today, a Trust Centre page shows customers the AI you use, and the Evidence Vault holds a dated snapshot of each step.

The history. Governance decisions and enforcement actions are snapped into a sealed, timestamped history as the work happens. Nobody files anything by hand.

See the whole platform

United Kingdom

What applies to AI in the UK

The UK has no AI Act. These are the rules and expectations that shape how UK organisations govern AI today, with what each asks of you.

In forceUK GDPR automated decisionsSince 5 February 2026, Articles 22A to 22D allow significant automated decisions about people only with safeguards, including human intervention and a way to contest.In developmentICO code of practice on AIThe ICO must produce a statutory code on AI and automated decision-making, and consulted on draft automated decision-making guidance in spring 2026.In forceFCA and PRA expectationsThe FCA will not add AI rules and relies on the Consumer Duty and the Senior Managers regime. PRA SS1/23 on model risk covers AI models at banks.MandatoryAlgorithmic Transparency Recording StandardCentral government departments and in-scope arm's-length bodies must publish a record for tools that significantly influence decisions with public effect or interact with the public.

Where your data is hosted

Aicura is hosted on AWS in Sydney, Australia, for every customer worldwide, and the AI it uses runs on Amazon Bedrock in Australia. Your data does not stay in the UK. Transfers from the UK to Australia are covered by our data processing agreement, which includes the EU Standard Contractual Clauses (Module Two) and the UK Addendum. Your governance data is not used to train models.

How we handle data

AI governance for UK financial services firms

How the FCA and PRA expect UK financial services firms to govern AI, from the Consumer Duty and SM&CR to PRA SS1/23 and UK GDPR automated decisions.

Read the guide

Ways to start

Start on the free plan and add more as you grow

Free

Register

Find the AI already in use and give every system an owner. Pick common tools from the library and their details fill in for you. Audit log, and system and agent reports included.

Self-serve

Privacy

Review your privacy policy against the automated decision-making frameworks for your country, with suggested wording for any AI system it does not yet disclose.

Self-serve

Essentials

Know the risks of each system and what to do about them. Risk assessments with suggested controls, policies and templates, model cards that describe each system, disclosures of the decisions it makes, and guardrail rules you write.

For larger organisations

Pro and Enterprise

Put your rules on live traffic. The gateway in your network, monitoring and automatic responses, limits on what agents can do while they run, incidents, board reports and the Trust Centre.

Compare plans and pricing

Learn

Understand AI governance before you buy anything

AI governance in practiceWhat a month of AI governance actually looks like, day by day.Questions to ask about your AIWhat a board, regulator or auditor will ask, and what a good answer draws on.Get started with the free AI registerSign up, connect discovery and build your register, one plain step at a time.FrameworksThe AI laws, standards and frameworks that apply in United Kingdom, with what each requires.

Browse the guides

Questions about Aicura in the United Kingdom

Does the UK have an AI law?

No. As of October 2026 the UK has no AI Act. AI is governed through existing law, most directly UK GDPR, whose Articles 22A to 22D on automated decisions have applied since 5 February 2026, with regulators such as the ICO, FCA and CMA applying five cross-sector principles within their own powers.

Does Aicura help with the UK GDPR rules on automated decisions?

Yes. The AI register records which systems make significant decisions about people and how much a person is involved. Impact assessments, oversight and records then support the safeguards Articles 22A to 22D ask for, such as human intervention and a way to contest. It supports the work and the decisions stay with you.

Where is Aicura hosted for UK organisations?

Aicura is hosted on AWS in Sydney, Australia, for every customer worldwide, and the AI it uses runs on Amazon Bedrock in Australia. Transfers from the UK are covered by our data processing agreement, which includes the EU Standard Contractual Clauses (Module Two) and the UK Addendum. Your governance data is not used to train models.

What does Aicura cost in the UK?

Prices are in pounds sterling and exclude VAT. The AI register is free at its smallest size, and the pricing page shows every plan and size.

Start with what you're running

Connect your sources, see what Aicura finds, and take each system from the register to enforcement at your own pace.