AIQURIS · The AI Lifecycle Management Platform

Every AI deployment,
under control.

AI is moving faster than organisations can control it.

AIQURIS works out the risks, requirements and controls of every AI deployment, tracks whether they are in place, and keeps them current. So AI deployments go live faster, with a clear basis for every decision.

From one deployment to your entire AI portfolio. For SMEs and enterprises alike.

WorkspaceILLUSTRATIVE
Alex Chen

AI register

Every deployment, with its risk, its status and what needs attention.

Deployments registered42Across 6 business units
Assessments completed6938 IMPACT+ · 24 RISK+ · 7 CONTROL+
Reviews needing attention72 due within 14 days
DeploymentOwnerIMPACT+RISK+StatusNext action
Visual defect inspectionComputer vision · AI-024Manufacturing qualityModerateModerateReview due Review changed contextDue 6 Oct · context change recorded
Candidate screening assistant ↗Decision support · AI-031Talent acquisitionMajorCriticalIn assessmentProvide control evidenceDue 29 Sept · 24 required actions open
Credit origination affordability assistantDecision support · AI-009Risk and lendingMajorCriticalReassessmentProvide testing evidenceDue 4 Oct · 3 controls open
Grid load forecastingPredictive AI · AI-052Network operationsModerateModerateIn operationReview on material changeCondition-based · last assessed 8 Aug
Contract summarisation copilotGenerative AI · AI-066Legal and compliancePendingPendingAwaiting triageComplete IMPACT+ triageRegistered 9 Sept
Internal knowledge chatbotGenerative AI · AI-018IT and operationsMinorNot requiredIn operationScheduled reviewDue 15 Nov
Showing 6 sample deploymentsSee one deployment in detail ↗

Every deployment in one AI register, with its risk, its status and what needs attention. Control, deployment by deployment. Visibility across all of them.

The challenge

You have policies. You test. You monitor. You have experts.
So where's the gap?

Deployments still stall in pilot, or go live with unmanaged risk.

01Generic

Policies and frameworks

Set requirements for AI in general. They don't say what a deployment needs, or whether it is in place.

02Partial

Testing

A snapshot. Only one of many controls a deployment needs.

03Partial

Monitoring

Covers selected aspects, after the fact. Shows what happens, not what should be controlled.

04Manual

Expert assessments

Manual and person-dependent. They don't scale, and go out of date when a deployment changes.

None of them works out what each deployment needs, or keeps it current.

AIQURIS closes the gap.

It works out what your specific deployment needs, maps it against what you already do, and shows what's missing, at every stage of the AI lifecycle.

Because it starts from the risks of the actual deployment, it is:

  • Deployment-specific, not generic.
  • Comprehensive, not partial.
  • Automated, not manual.

Decide with confidence. Defend with evidence.

Why it is hard

Same AI system. Different risk.

AI risk is hard to tell. It cuts across disciplines, differs by deployment and changes over time, and the controls differ with it. Below, one system in four sectors: same technology, four different risk profiles.

SAME SYSTEM · FOUR CONTEXTS Knowledge assistant: answers staff questions from internal documents
Risk domainFinancial servicesAdvisers answering client product questionsHealthcareClinicians checking treatment guidelinesDefence & critical infrastructureControl-room operators querying operating proceduresManufacturingTechnicians querying machine maintenance manuals
SafetyNegligibleCriticalHighCritical
SecurityHighHighCriticalModerate
PerformanceModerateHighHighHigh
Legal complianceCriticalHighHighModerate
EthicsModerateHighModerateLow
SustainabilityLowLowLowLow
Deepest controls onLegal complianceSafetySecuritySafety
The system is the same. The risk and the controls are not. Illustrative profiles. Actual severities are derived for each deployment.

So risks and controls have to be worked out deployment by deployment, and updated whenever something changes.

How it works

Walk through your deployment.
AIQURIS works out the rest.

A guided intake captures everything that matters about your deployment. The engine then applies the standards, regulations and policies AIQURIS maintains, and works out the risks, requirements and controls it needs to be safe, perform and comply.

The AIQURIS method: governing sources (standards, sector frameworks, regulations, contracts, policies) are applied to the deployment and its context, worked out by AIQURIS into impact, risk, controls, evidence and remaining risk, leading to a go-live decision and AI under control.
Standards
Sector Frameworks
Regulations
Policies
Contracts
DeploymentContext
Impact
Risk
Controls
Evidence
Remaining risk
Go-liveDecision
AI under
control
Governing Sources Worked out by AIQURIS AI under control

Every control is linked to its source and to the evidence it requires.

The missing link

The critical connector between AI governance and your AI deployments.

Governance sets the rules. Teams build and run the deployments. Legal, cybersecurity, risk and the business each see one part. AIQURIS sits in between and connects them all: which rules apply to each deployment, where it stands, and who acts next.

How the engine works
AI governancePolicies, standards, regulations
Requirements for each deployment
  • Business ownerGo-live decision
  • AI CoETests and technical controls
  • CybersecuritySecurity controls
AIQURISAI LIFECYCLE
MANAGEMENT
  • LegalRegulatory obligations
  • Risk, compliance and governanceRisk exposure, evidence, compliance status
Status and evidence
AI deploymentsSystems, data, models, operations
Top to bottom: from the rules to what each deployment needs.Across: every function gets its part from one place.

It doesn't add to your stack. It connects it.

Example

Find the gaps before go-live, not after.

One real deployment, traced from risk to evidence. AIQURIS assessed a candidate screening assistant before its recruitment pilot went live.

Candidate screening assistant

Decision support · AI-031 · Talent acquisition
01What AIQURIS found
5 exposure areas12 findings24 required actions
02One risk, traced to evidence
RISK

Hiring fairness and discrimination Critical

Protected attributes or proxy signals could unfairly exclude candidates from progressing.

REQUIREMENT

No automated rejection

Protected attributes must not influence results.

CONTROL

Human review and attribute testing

Human review before any rejection. Testing that protected and proxy attributes do not affect scores.

EVIDENCE

Results and records

Test results against defined thresholds. Review records showing that people made the decisions.

The other four exposure areas
Critical

Regulatory compliance and transparency

The published privacy policy does not describe the AI assistant, creating a blocker for screening decisions.

High

Human oversight and workflow control

Interface defaults, hidden filtering or cut-offs could turn decision support into automated exclusion.

High

Screening quality and validation

Ambiguous criteria and extraction errors could produce unreliable scores and ranking errors.

High

Data privacy and vendor assurance

Applicant data in prompts, responses and logs requires verified minimisation, retention and vendor controls.

03The outcome

RECOMMENDATIONProvide evidence for the critical controls before go-live.

DECISIONTalent acquisition held the pilot until the evidence is in.

Summarised from an AIQURIS assessment of a real deployment. Ratings are before mitigation (inherent risk).

Know the risks, and exactly what to do, before go-live.

Lifecycle

After go-live,
control continues.

One connected record across the deployment's life, shared by every function involved. When the deployment or its governing sources change, requirements, controls and evidence are updated together.

  1. 01Define
  2. 02Assess
  3. 03Implement and decide
  4. 04Operate
  5. 05Change and review
  6. 06Retire
GO-LIVE
↺ Material change returns to assessment

EXAMPLE The approved job criteria changed after go-live. Requirements reassessed, controls reopened, evidence updated, decision on continued operation updated.

Every product includes reassessments. CONTROL+ adds defined change triggers.

The deployment changes. The controls keep up.

Products

The right depth for every AI deployment.

One platform, three levels of depth. Start with IMPACT+ and go deeper only where the risk calls for it, so effort and cost match the deployment.

IMPACT+

What can go wrong?

Who could be harmed, and how badly.

YOU RECEIVE
  • Deployment registered in the AI register
  • Affected stakeholders and potential harms
  • Impact tier
  • Routing: limited follow-up, or RISK+
RISK+

How does it go wrong?

How the harm could occur, and which controls address it.

EVERYTHING IN IMPACT+, PLUS
  • Risk profile across all six risk domains
  • Applicable requirements and high-level controls, as a checklist
  • Declared control status and open gaps
  • High-level testing and monitoring guidance
  • Recommendation: proceed, or move to CONTROL+
CONTROL+

What prevents it?

AI Assurance: the controls in detail, the remaining risk, the evidence.

EVERYTHING IN RISK+, PLUS
  • Assessment against the relevant standards, regulations and your own policies, clause by clause
  • Detailed controls, test protocols and monitoring specifications
  • Vendor assessment
  • Remaining (residual) risk, measured against your risk appetite
  • Lifecycle: change triggers and reassessment
FOR SMEs

No AI governance team needed. Start with one deployment and pay per deployment.

FOR ENTERPRISES

One AI register for the whole portfolio. CONTROL+ where the risk calls for it, with expert-supported setup.

The higher the stakes, the deeper the control.

AIQURIS co-founders Dr Martin Saerbeck (left) and Dr Andreas Hauser (right)
AIQURIS co-founders Dr Martin Saerbeck and Dr Andreas Hauser.

Why AIQURIS

Decades of safety-critical expertise.
Behind every assessment.

AIQURIS was founded by Dr Andreas Hauser and Dr Martin Saerbeck. Engineering, certification, digital systems and mathematical modelling, now applied to AI. Seven years developing the AIQURIS methodology, the early years within TÜV SÜD’s global AI quality practice. AIQURIS is independent.

ISO/IEC 42001ISO/IEC 5259IEEE 7000 series

Selected standards contributed to. Meet the founders and explore their standards work ↗

“The solution AIQURIS presented is the first I know of in the market that closes the gap by combining AI risk management and requirements from technical standards in a tool-based way.”
Head of AI Data and Compliance
Leading German automotive OEM

Expert knowledge, applied automatically to every deployment.

PROGRAMMES AND MEMBERSHIPS
IMDA Spark CompanyAI Verify Foundation member

IMDA Spark Company · AI Verify Foundation member

STANDARDS COMMITTEES
  • ISO/IEC JTC 1/SC 42
  • DIN
  • Enterprise Singapore · SMF

The team sits on the committees that write the AI standards.

CUSTOMERS IN
  • Public transport
  • Healthcare
  • Pharma
  • Maritime
  • Telco

Get started

Start with an Assessment Sprint.
Five hours of your team's time.

The AI Deployment Assessment Sprint is guided by AIQURIS from start to finish. We prepare the assessment; your team gives five hours across three sessions. Within three weeks, you have one real deployment assessed at RISK+ depth, and actions with named owners.

01

Briefing. 1 hour

Choose a deployment, in planning or already in production. AIQURIS then screens its impact and prepares the risk profile, requirements and controls.

02

Workshop. 3 hours

The accountable stakeholders in the room. Validate the risks, challenge the controls, agree what closes the gaps.

03

Readout. 1 hour

Leave with an assessment record and an action list with named owners. Run the next deployments yourself on the platform.

Questions first? Contact info@aiquris.com

From one deployment to your entire AI portfolio.

Dashboard and lifecycle views are illustrative.

Privacy Overview

We use cookies to operate our website, ensure its proper functioning, improve performance, analyse traffic, and support our marketing activities. Some cookies are strictly necessary and cannot be disabled. Others can be enabled or disabled below according to your preferences. For full details, please see our Privacy Policy.