Octangle - untangle compliance

Use AI without losing
control.

Octangle helps teams find AI systems, classify EU AI Act risk, connect controls with evidence and keep governance decisions auditable.

Shadow AI discovery Risk classification FRIA and DPIA Audit trail and reports
The inventory

Your full AI stack. One state of record.

Fed by discovery, assessments and evidence — no spreadsheet maintenance, no stale state.

The real problem

AI is already running in your company in places no one fully tracks: automations, Copilot agents, API calls, and tools that were never designed as governance systems.

Undocumented. Unclassified. Still your responsibility.

In automations
n8n · Make · Power Automate
In agents and copilots
Copilot Studio · internal bots
In direct API calls
OpenAI · Anthropic · custom builds
untangle

Scattered becomes traceable.

Before

Scattered AI, shadow workflows, unclear roles and no shared state of record.

With Octangle

An ordered inventory where every system is captured, classified, linked to evidence and open issues.

The same stack. Once in the fog, once in plain language.

Process

Four steps to an auditable state.

01
Connect the stack

Start with read-only discovery across automation, collaboration and development tools.

02
Classify systems

Determine role, risk class, Annex III relevance and transparency duties through a guided model.

03
Structure obligations

Turn each classification into obligations, controls, owners and missing evidence.

04
Decide and report

Document the current state, open gaps and decisions in a way that can be reviewed later.

Building blocks

Six building blocks. One governance layer.

Shadow AI discovery

Read-only connectors identify AI workflows and API usage across the tools where work already happens.

Risk classification

Structured EU AI Act classification with versioned inputs, rationale and reviewable outcomes.

Obligation mapping

Provider and deployer duties are linked to systems, controls and evidence so ownership stays clear.

Controls and evidence

Measures, artifacts and incoming evidence stay connected to the requirements they support.

FRIA and DPIA

Fundamental-rights and data-protection impact assessments in one structured workflow, with rationale and conclusion tracking.

Recommended actions

Octangle turns classification, coverage and FRIA status into prioritized next steps with traceable reasoning.

Architecture

Built for the audit case.

Governance documentation must stand up to reviewers, not dashboards. Octangle keeps each assessment reproducible, each change logged and each report tied to the regulatory state at the time.

Book diagnostic
01

Deterministic engine

Rule-based classification instead of LLM guessing. The same inputs produce the same result, with a reproducible rationale.

02

Versioned snapshots

Assessments are frozen against the regulatory state at the time of review, so later framework changes do not rewrite history.

03

Complete audit trail

Changes to systems, assessments, controls and decisions are recorded with who, what, when and why.

04

Read-only by design

Octangle does not write to your infrastructure. It documents compliance without changing systems.

05

Multi-org and roles

Tenant-aware governance with granular permissions for groups with multiple entities.

06

Governance alerts

Decisions, status changes and new discovery findings can be surfaced in Slack or Microsoft Teams.

Method

Not just a tool. A coherent model.

Octangle is built around a layered governance model: inventory, risk and control layers, post-market monitoring and management review. Structured, cumulative and informed by audit practice.

01

Layered

Governance, risk, quality and ethics in levels that build on each other.

02

Closed loops

Detected gaps become trackable actions until they are resolved.

03

Audit logic

Designed around principles that hold up in IT audit: traceability, evidence and repeatability.

Who it is for

For the people who ultimately own it.

01

Head of IT and Ops

Owns the automation stack and is accountable for its compliance without having a dedicated governance team.

“I cannot secure what I cannot see.”

02

Innovation and digital teams

Drive AI adoption in mid-market companies and need to keep momentum without opening governance gaps.

“Keep moving without creating problems for later.”

03

Audit, controlling and legal

Need a traceable, versioned state of record rather than another dashboard without audit depth.

“Show me the current state. Evidence, not assertion.”

Not an oversized GRC program. Not a narrow bias audit. A governance layer for the AI stack of mid-market organizations.

Working together

Wherever you stand, there is an entry point.

From first orientation to enterprise-wide governance programs.

Orientation

for: For teams that need to know where they stand.

A 30 to 45 minute conversation that maps your maturity level and most urgent risks. You leave with a clear next step.

Book diagnostic
Early maturity

for: Initial structure with little setup.

Templates, checklists and policy patterns for an independent start.

Activation

for: The structured setup.

Guided setup: inventory, first assessments, classification, roles, gaps and a 90 day plan.

Ongoing operations

for: Governance as a running operating model.

Reviews, reassessments, evidence, actions, reports and ongoing advisory.

Enterprise-wide

for: Group and multi-entity structures.

Multiple entities, approval workflows, integrations, FRIA and executive reporting.

Orientation

AI Governance Diagnostic

for: For teams that need to know where they stand.

A 30 to 45 minute conversation that maps your maturity level and most urgent risks. You leave with a clear next step.

Book diagnostic
Early maturity

Governance Starter Kit

for: Initial structure with little setup.

Templates, checklists and policy patterns for an independent start.

Activation

Activation & Baseline

for: The structured setup.

Guided setup: inventory, first assessments, classification, roles, gaps and a 90 day plan.

Ongoing operations

Managed AI Governance

for: Governance as a running operating model.

Reviews, reassessments, evidence, actions, reports and ongoing advisory.

Enterprise-wide

Enterprise Governance Program

for: Group and multi-entity structures.

Multiple entities, approval workflows, integrations, FRIA and executive reporting.

Octangle helps structure AI governance and does not replace legal or tax advice.

OCTANGLE AI SANDBOX - A NEW WAY TO INTRODUCE AI

A safe place to move faster.

Most governance begins after AI is already running. The AI Venture Sandbox reverses that: a bounded space where teams test new AI tools and use cases while risk assessment, documentation, approvals and evidence run from the first moment. Not as friction. As a launch path.

01

Explore

Test new tools in a bounded environment without touching core company processes. Full room to learn, clear boundaries.

02

Prove

Governance grows with the experiment: what works is documented, assessed and approved at the same time.

03

Transfer

If an approach proves useful, the path into production is already prepared: traceable, auditable and without a restart.

Innovate at startup speed.
With enterprise traceability.

Those used to feel contradictory. The sandbox turns them into one workflow.

Integrations

Connected to your stack.

Discovery, evidence sync and governance alerts through read-only connectors. No agent, no write access.

GitHubEvidenceJiraEvidencen8nDiscoveryMakeDiscoveryPower AutomateDiscoveryCopilot StudioDiscoveryOpenAI UsageDiscoveryAnthropic UsageDiscoveryMCP AuditTelemetryMicrosoft Entra IDIdentityMicrosoft GraphDiscoverySlackAlerts
All connectors are read-only · Credentials are stored encrypted
Resources

Coming soon.

Practical tools for the first step, whether or not you work with Octangle.

Quick check

Annex III self-check

An initial orientation on whether a system might fall into the high-risk category.

In preparation
Template

Shadow AI discovery kit

A structured template for making AI usage in your own stack visible.

In preparation
Overview

AI Act timeline

A concise view of which obligations apply when.

In preparation
Pilot program

We work with a small group of pilot partners.

Octangle is in active development. We select a small number of companies that want to build AI governance early and shape the product with practical feedback.

In active development · Limited places
01

Early access

Full platform access before general availability.

02

Direct influence

Your feedback flows directly into roadmap and prioritization through short communication paths.

03

Guided setup

We set up governance with you instead of leaving you alone with a tool.

Who fitsMid-market companies with growing AI and automation usage that want to build governance now rather than under deadline pressure.

Bring clarity to your AI stack.

Start with a free diagnostic. 30 to 45 minutes, a clear view of your maturity level and a concrete next step.

compliance, disentangled.