Privacy & AI governance, with you in control

Careful AI for
compliance teams.

With guardrails you can prove. Raksa’s agents take on the groundwork (assessments, data maps, vendor checks, monitoring) while you stay in control: every outcome approved by your team, every action on the record.

Cautious about AI in compliance? So are we. Every agent runs under a Mandate, two watchdogs, Rex & Kira, review the others, and nothing passes the Human Gate without a person. Carefully embedded AI, not autopilot.

Try it free →Book a walkthrough

NewGetting ISO 42001 ready? Build your free readiness kit →

150+vendor profiles to draw on
30 minnot three weeks
100%human sign-off
The Living System
POSTURE7278848994TheoRegulation detectedFeed scannedNyxVendor scannedProfile enrichedLeoControl verifiedGap identifiedAvaRisk flaggedMitigation loggedKaiDeadline trackedReminder sentSomPosture improvedScore updated

Six agents operate · Rex & Kira watch over them · you stay in control

The 45-second tour

See a full assessment come together, start to finish.

A plain-language intake becomes a finished, defensible assessment: the agents pull in what they already know and flag the risks, your team reviews, and a person signs it off. Best with sound on.

The Platform

Everything you need, in plain sight.

The capabilities your team uses every day, each one accelerated by AI, reviewed by you. Click any card for what it does, what you get, and how it connects, in plain language.

One intake→Every assessment→RoPA & data map, built for you→Agents keep watch→Prove it, trust centre

Start with the assessment. Everything downstream builds itself and keeps itself current.

The Team

Six agents do the work. Two watch over them.

Behind every capability above is a team of agents doing the groundwork, and you approving it. Each of the six takes a slice and works around the clock; and because AI needs oversight, two more watch the others and keep a record you can prove. Click through to meet them.

Ava, Chief Risk Analyst

The moment data enters an assessment, Ava flags the risks, and suggests the control to fix each one. You see the issue and the fix together, and decide what to do.

The Watch · oversight tier

The agents that watch the agents.

Autonomy needs oversight. Rex and Kira monitor the platform’s agent runs and AI pre-fill activity against your policies and write it to a tamper-proof record, so you can prove human oversight, not just claim it.

Rex
Governance Director

Audits agent runs and AI pre-fill activity against your policy set (scope, human oversight, groundedness, lawful data handling), and writes each one to an immutable, hash-chained audit trail. The internal-affairs function for Raksa’s own AI, with coverage expanding to every AI surface.

Kira
Security Operations Lead

The ever-watchful sentinel: detects prompt injection, data exfiltration, cross-tenant access and runaway loops. Flags anomalies, and can hold a critical action pending human release.

EU AI Act · Art 14Art 15GDPR · Art 22Art 32Art 33+ exportable assurance pack

“We hold our own AI to the standard we help you meet.” Humans decide; the agents flag, recommend, and record.

Why Raksa

Built for teams who want help, not a black box.

Starts from knowledge, not a blank form

Most tools hand you an empty assessment. Raksa starts from a growing intelligence library: 150+ vendor profiles, curated process templates and rule sets for the major privacy and AI regimes. Your job is to validate, not to research.

One platform, every domain

Stop stitching a DPIA tool to a ROPA spreadsheet to a cookie scanner. Assessments connect to posture to agents to trust. Change one thing and everything updates.

You stay in control

The agents do the groundwork and surface what matters; your team reviews and signs off. Human-in-the-loop by design: nothing is finalised without a person.

It governs its own AI

Rex and Kira monitor agent and pre-fill activity against policy, and every action lands in the Evidence Ledger, an exportable trail built for EU AI Act and GDPR reviews. Carefully embedded AI, not autopilot.

The Story

We built Kormoon, the Thai word for data, to help organisations navigate compliance. It was acquired by Privitar, then Informatica, and now powers governance at Salesforce. The mission never stopped.

Raksa, the Thai word for protect, is the next chapter. Where Kormoon helped you understand your data, Raksa protects your whole compliance posture: not with forms and checklists, but with intelligence that compounds and a team of agents working alongside you, with you in control.

Paul McCormack, Founder
The Guardrails

One compliance engine, every surface. Guardrails on all of it.

Every Raksa agent runs under a Mandate, passes the Human Gate, is watched by Rex & Kira, and leaves its tracks in the Evidence Ledger, all inside your Data Boundary. See how each guardrail works →

Raksa Cloud

Runs in our EU and UK cloud. Your data is never used to train AI. Published prices, start today. The right fit for most teams.

Raksa Sovereign

Runs in your own cloud, in your own country, on your own AI keys. Your data never leaves. For regulated industries and strict data rules.

Early Access

See it work for your team.

AI agents, real-time risk detection, human oversight: all live. Tell us your team email and we’ll be in touch to set up a walkthrough.