Compliance

Vendor posture. Plainly stated.

aiGUARD Systems Limited operates in regulated industries where compliance posture is a prerequisite for engagement. This page sets out our position on the obligations that matter for procurement, security, accessibility, and intellectual property, the information enterprise procurement and risk teams typically request.

EU AI Act / UK GDPR / WCAG 2.2 / UKIPO IP

Provider obligations, understood, designed for, deployed.

Our compliance posture follows the same stack logic as the technology itself: Safe identity, Reliable execution control, Accountable evidence. aiGUARD Systems Limited operates as a technology provider. The patent-pending architectures in our trust stack are designed to support downstream providers and deployers of high-risk AI systems in meeting their obligations under the EU AI Act, with particular focus on Article 12 (record-keeping), Article 13 (transparency), and Article 16 (provider obligations).

For our own corporate operations, we comply with the obligations applicable to a UK-incorporated technology company providing AI architecture to regulated-industry partners. The architectural design of our products is documented in UKIPO patent applications, the standards positioning page, and the published working paper at AGS-PP-001. These materials provide the technical substrate that downstream providers can rely on for their own compliance.

Engagement with deployers preparing for the EU AI Act Article 12 implementation timetable, subject to final adopted AI Omnibus amendments is scoped on a per-partner basis under NDA. Reference build patterns are established through our work with IBM under SoW1 (signed February 2026).

No cookies. No trackers. No third-party analytics.

Our website operates without cookies, behavioural tracking, third-party analytics tags, or advertising pixels. Visitors are not profiled. Interactions are not retained beyond the operational telemetry required by our hosting infrastructure (Netlify edge logs, retained for service-operational purposes only).

Personal data is processed only where individuals make direct contact with us (e.g. by email for engagement enquiries). In those cases we hold the contact details and correspondence content for the purpose of the enquiry and onward partnership development. We do not sell, share, or syndicate any personal data. UK GDPR rights apply. Requests in respect of UK GDPR rights can be addressed to the contact email below.

For deployment integrations, technical data flows are scoped per partner under NDA. The trust stack architecture is designed to minimise the data exposure surface at every layer, particularly Synapse-ID™, which enforces identity footprint reduction as a structural property of the system.

WCAG 2.2 alignment. Per-inference accessibility certification.

Our website is built with accessibility as a baseline expectation: semantic HTML, keyboard navigability, screen-reader compatibility, reduced-motion support (the trust stack pipeline animation on the homepage respects prefers-reduced-motion), text contrast meeting WCAG 2.2 AA, and no reliance on colour alone to convey meaning.

On the product side, the trust stack includes a per-inference accessibility compliance field in the aiGEC™ certificate. The mandatory aiGEC™ field set includes a reference to the active accessibility policy profile and a boolean indicator of accessibility compliance for the certified output. We have not identified an existing technical specification of comparable scope that includes a signed per-inference accessibility compliance field. This claim should be treated as subject to continuing prior-art and standards review. The mechanism is in scope of patent application GB2607087.0 and supports Public Sector Bodies Accessibility Regulations and WCAG 2.2 alignment in regulated AI deployments.

Responsible disclosure for security issues.

Security issues affecting aiGUARD Systems infrastructure, the published artefacts on our website, or our patent-pending architectures as documented in published materials, may be reported to us directly. We treat all responsible disclosure reports seriously and respond promptly.

Reports should be sent to the contact email below with subject line beginning SECURITY:. Please describe the issue in detail, include reproduction steps where applicable, and indicate any agreed disclosure timeline. We aim to acknowledge within 72 hours and remediate or coordinate disclosure within reasonable industry-standard timeframes.

We do not currently operate a paid bug bounty programme. Credit for responsible disclosure is given in any subsequent advisory or release notes, subject to the reporter's preference. We will not pursue legal action against good-faith security researchers who comply with this policy.

Ten patent applications. FRAND on standards-essential claims.

aiGUARD Systems Limited holds ten UK patent applications at UKIPO across the three products of the trust stack. The portfolio is described in detail on our patents page. Standards-essential claims under these applications are offered under the binding FRAND undertaking on our licensing page, in force from 12 May 2026.

Commercial licensing of non-standards-essential claims is governed by the two-tier commercial framework on the licensing page (currently in draft pending IP counsel ratification). Parties seeking interim commercial licences should contact us directly.

Trade mark applications are filed at UKIPO. The aiGUARD™ word mark is under reference UK00004354828 (filed 15 March 2026, classes 35 and 42). All trade mark symbols on this site denote unregistered common-law marks; registered (®) marks will be used only after UKIPO registration is confirmed.

Third-party notices.

All third-party trademarks referenced on this site are the property of their respective owners and are used for descriptive purposes only. No endorsement is implied or claimed. Specifically: IBM and watsonx are trademarks of International Business Machines Corporation; Mastercard is a trademark of Mastercard International Incorporated; Google is a trademark of Google LLC; NHS is a trade mark associated with the National Health Service. We refer to these names descriptively and do not imply endorsement. References to standards bodies (BSI, ISO/IEC, ITU, ETSI) are descriptive of standards activity, not endorsements.

Our website is built as static HTML with no third-party tracking dependencies. Fonts are system fonts only (Georgia, San Francisco, Segoe UI, Helvetica Neue, Arial). The site is hosted on Netlify edge infrastructure. No content delivery network endpoints other than Netlify are used.

For enterprise risk and procurement teams.

Enterprise procurement and risk teams typically request specific compliance documentation as a prerequisite to engagement. We are happy to engage on the standard procurement workflow, scoped per engagement under NDA. Typical artefacts we can provide on request include:

  • Vendor self-assessment questionnaires (SIG, CAIQ, or partner-specific formats)
  • Architecture documentation under NDA
  • EU AI Act provider-side compliance position statement
  • Data protection impact assessment (DPIA) inputs
  • Patent and licensing position statement
  • Insurance and incorporation evidence

Engagement proceeds via qualified introduction. We do not respond to unsolicited procurement RFPs but are happy to engage on partner-specific or framework-specific compliance documentation through the contact route below.

Discuss compliance posture.

Compliance enquiries from regulated-industry partners, enterprise risk teams, standards bodies, and supervising authorities are welcomed. Please indicate the nature of the enquiry to route it to the right team.

Contact us