Secure information.
Govern AI.
- ISO 27001 — information security management
- ISO 42001 — AI management
- Staff Information Security Awareness
- AI Fundamentals & AI Professional practice
- EU AI Act
INTRODUCING VEIL COMPLIANCE
Meet your new
compliance team.
Specialist AI agents for the work of compliance.
Human judgement at the centre.
A proposed platform to help businesses implement standards, manage compliance and privacy, and commission independent internal audits.
A venture in development. Investor and pilot conversations welcome.
Designed for the work
between assessments.
Project support
and ongoing management.
Evidence you can follow.
Decisions people can challenge.
THE PROPOSED TEAM
Specialists with
a job to do.
Choose one role or combine the managers. Each agent works within an agreed scope, asks for organisational context and builds a record of its work.
DEFINED PROJECTIllustrative workflow
A clear route to implementation.
Understand the business, assess the gaps and guide the work needed to put a standard or framework into practice.
- Ask the right people for organisational context
- Prepare policies, risk records and an implementation plan
- Hand over approved records to the company or its manager
EXAMPLE REQUEST
“Help us implement ISO 27001 around how our company actually works.”
Formal deliverables go to a human quality reviewer.
Concept walkthrough only. These examples describe planned capabilities, rather than a live AI service.
AN ONGOING WORKING RELATIONSHIP
Compliance keeps moving.
So should your support.
The managers are designed to work alongside your people and the tools you already use, helping maintain the programme after an implementation ends.
Discuss a pilotMaintenance and guidancePolicy reviews, risk actions, evidence requests and management review preparation.
Connected monitoringPlanned 24/7 automation over agreed sources, with visible coverage and escalation.
Privacy operationsRights cases, privacy records, consent review and support through authorised integrations.
Assessment supportSource-linked evidence for internal reviews and external human auditors.
HUMAN OVERSIGHT BY DESIGN
AI does the groundwork.
People own the judgement.
Formal outputs enter a human quality review. A reviewer can challenge the work, send it back for clarification and approve the final version.
- 01
Understand
People confirm the context and scope.
- 02
Prepare
Agents gather evidence and draft the work.
- 03
Challenge
A human reviewer tests the reasoning and asks for clarity.
- 04
Approve
The approved version records the decisions behind it.
AUDIT INDEPENDENCE
A separate mandate for the auditor.
The audit role is designed around separate permissions, working records and assessment authority. Where implementation creates a self-review conflict, a competent independent human must own the audit judgement.
OUR CERTIFICATION OBJECTIVE
Planned ISO 27001
and ISO 42001 certification.
Our launch programme includes seeking certification through BSI for the organisation operating Veil Compliance, with the intended scope covering the platform’s development and operation.
Certification is planned and has not yet been awarded. ISO 27001 addresses information security management; ISO 42001 addresses AI management.
Customer management retains accountability. Automated monitoring and human response cover are separately defined.
AN INTERNATIONAL VISION
Built for a connected
business world.
A shared platform for international standards, with separately validated country packs for the obligations that apply to each company.
PLANNED AGENT SKILLS
Veil Academy knowledge.
Applied to the work.
The proposed skills library draws on Veil Academy’s Fundamentals, implementation, internal audit, lead audit and professional course pathways. Assign one subject or combine approved skills around your business.
Secure information.
Make privacy
operational.
- ISO 27701 — privacy management
- UK GDPR & EU GDPR
- Data Protection Act 2018 & PECR
- DSARs, DPIAs & privacy by design
- Consent, cookies & privacy reviews
Prepare, respond
and recover.
- ISO 22301 — business continuity
- Operational Resilience
- UK FCA Operational Resilience
- EU DORA
- Crisis Management & scenario exercising
Turn risk insight
into action.
- ISO 31000 — risk management guidance
- Enterprise Risk Management
- Risk Management Professional practice
- Risk assessment, treatment & reporting
- Risk appetite & continual review
Connect quality,
people and planet.
- ISO 9001 — quality management
- ISO 14001 — environmental management
- ISO 45001 — occupational health & safety
- Standards transition & change planning
- Integrated management systems
Understand the
wider network.
- ISO 28001 — supply chain security
- Supplier & third-party risk
- Supply chain evidence & assurance
- Security planning & review
Build stronger
business controls.
- UK Bribery Act 2010
- UK Criminal Finances Act 2017
- UK Fraud Act 2006
- Anti-bribery & fraud awareness
- Tax evasion facilitation prevention
See the context.
Ask better questions.
- Corporate Intelligence
- Corporate Intelligence & Geopolitical Risk
- OSINT — open-source intelligence
- HUMINT — human-source intelligence
- Lawful deep & dark web research
Further framework packs on the roadmap
NIST CSF · COBIT · COSO · GARP · UK NCSC 10 Steps · ISO 27018 cloud privacy · ISO 22313 business continuity guidance
This is a planned skills catalogue, not a claim that every pack is available today. Each skill requires appropriate content rights, current source material and professional validation before release. ISO 31000 and ISO 22313 provide guidance; course titles do not turn them into certifiable management-system requirements.
Planned initial markets
- UK & EU
- Australia
- United States
Regional coverage will expand through professional validation and pilot evidence. Applicable laws, editions and effective dates will be assessed for each customer.
One standard or several.
Begin with a defined need. Add approved packs as the company’s requirements grow.
A personality that fits.
Planned avatar and voice choices make the experience approachable. Every choice follows the same professional controls.
THE PLANNED PROGRAMME
A phased route to launch.
- MONTHS 1–4
Define & prototype
Validate the need, agree rights and demonstrate the workflow.
- MONTHS 5–7
Build the alpha
Connect the roles, evidence records and integration patterns.
- MONTHS 8–12
Test & validate
Security testing, human review and controlled paid pilots.
- MONTHS 13–15
Regional pilots
Validate country packs and progress the planned ISO 27001 and ISO 42001 certification assessments.
Indicative timing from a funded start, subject to scope, rights, testing and readiness. No certification is claimed as secured.
INVESTORS & PILOT ORGANISATIONS
Help build
Veil Compliance.
We welcome conversations with prospective investors, technology partners and pilot organisations who want to help turn this concept into a trusted service.