We built Kormoon — the Thai word for data — to help organisations navigate compliance. It was acquired by Privitar, then Informatica, and now powers governance at Salesforce. The mission never stopped.
Raksa — the Thai word for protect — is the next chapter. Where Kormoon helped you understand your data, Raksa protects your whole compliance posture: not with forms and checklists, but with intelligence that compounds and a team of agents working alongside you — with you in control.
Supercharge how
you do compliance.
Raksa gives your privacy and compliance team a fleet of AI agents to take on the groundwork — assessments, data maps, vendor checks, monitoring — while you stay in control. Privacy by design and default, with human oversight built into every step.
Cautious about AI in compliance? That’s exactly why two more agents — Rex & Kira — watch over the others, and nothing is finalised without a human. Carefully embedded AI, not autopilot.
Six agents operate · Rex & Kira watch over them · you stay in control
Six agents. One job each.
Each agent takes on a slice of the groundwork and works around the clock — your team reviews and approves. Click through to see what each one does.
Ava — Chief Risk Analyst
The moment data enters an assessment, Ava flags the risks — and suggests the control to fix each one. You see the issue and the fix together, and decide what to do.
Everything you need, in plain sight.
Six capabilities your team uses every day — each one accelerated by AI, reviewed by you. Click any card for what it does, what you get, and how it connects, in plain language.
The agents that watch the agents.
Autonomy needs oversight. Rex and Kira monitor the platform’s agent runs and AI pre-fill activity against your policies and write it to a tamper-proof record — so you can prove human oversight, not just claim it.
Audits agent runs and AI pre-fill activity against your policy set — scope, human oversight, groundedness, lawful data handling — and writes each one to an immutable, hash-chained audit trail. The internal-affairs function for Raksa’s own AI, with coverage expanding to every AI surface.
The ever-watchful sentinel — detects prompt injection, data exfiltration, cross-tenant access and runaway loops. Flags anomalies, and can hold a critical action pending human release.
“We hold our own AI to the standard we help you meet.” Humans decide; the agents flag, recommend, and record.
Built for teams who want help, not a black box.
Starts from knowledge, not a blank form
Most tools hand you an empty assessment. Raksa starts from a growing intelligence library — 140+ vendor profiles, curated process templates and 50+ country rule sets. Your job is to validate, not to research.
One platform, every domain
Stop stitching a DPIA tool to a ROPA spreadsheet to a cookie scanner. Assessments connect to posture to agents to trust — change one thing and everything updates.
You stay in control
The agents do the groundwork and surface what matters; your team reviews and signs off. Human-in-the-loop by design — nothing is finalised without a person.
It governs its own AI
Rex and Kira monitor agent and pre-fill activity against policy and record it to an immutable trail you can export for an EU AI Act or GDPR review. Carefully embedded AI, not autopilot.
See it work for your team.
AI agents, real-time risk detection, human oversight — all live. Tell us your team email and we’ll be in touch to set up a walkthrough.