HEX 165 — The AI Governance Engine

HEX 165 is our proprietary AI governance platform. It scans and remediates AI systems against the EU AI Act's 375 controls, with 16 IT and cyber security frameworks targeted on the roadmap. One scan produces assessments across every framework simultaneously.

  • Policy Engine — encodes regulatory requirements, deadlines, and submission formats as deterministic rules
  • Agent Orchestration — AI agents collect data from source systems, validate against schemas, and flag exceptions
  • Human-in-the-Loop — board-level and SCS sign-off gates built into every workflow. Nothing submits without approval
  • Workflow Auditability — every action logged with full timestamp and user attribution. NAO and ministerial accountability ready
  • Enterprise Memory — prior period decisions, methodology choices, and assumptions retained in context
  • Sovereign Deployment — UK sovereign infrastructure only. No data leaves UK jurisdiction. Supports air-gapped, private cloud, and on-premise models

Regulatory Modules

Each module is primarily data work, not platform engineering. The shared infrastructure — connectors, rules engine, agents, API — stays the same. Adding a new regulation means structuring its requirements, not rebuilding the platform.

  • EU AI Act — live now
  • NIST AI RMF — US market credibility, coming next
  • ISO 42001 — AI-specific management system standard
  • ISO 27001 — information security, broadens market reach
  • DORA — financial services digital operational resilience
  • NIS2, SOC 2, GDPR — further modules on the roadmap
EU AI Act NIST RMF ISO 42001 DORA NIS2 ISO 27001

Supported Regulatory Frameworks

HEX 165 governs AI systems across 16 frameworks spanning UK, EU, US and international standards. The EU AI Act module is live today; the remaining frameworks are in active development.

Sovereign Edge — Inference Distribution Network

Our Inference Distribution Network delivers sovereign, low-latency AI inference entirely within the United Kingdom. Data stays under UK jurisdiction at all times. No hyperscaler dependency. No extraterritorial data access risk. Operated by SC and NPPV3 cleared personnel.

  • Sub-10 ms inference latency across the UK, based on internal benchmarks under typical operating conditions
  • Full data sovereignty — all processing on UK-located infrastructure, governed by UK-incorporated entities
  • Air-gapped capability for environments requiring network isolation
  • Designed for UK Government and regulated enterprises with strict data residency requirements

Implementation & Deployment

HEX 165 is deployed as a managed Regulatory Reporting as a Service (RRaaS) platform and procured as a subscription. For government clients, deployment options include UK sovereign private cloud, on-premise within departmental data centres, air-gapped environments, and hybrid models combining sovereign cloud with edge inference nodes.

  • Managed deployment into your environment — sovereign cloud, on-premise, or air-gapped
  • Connector configuration for your source systems
  • Regulatory module activation and customisation
  • Ongoing policy layer updates as regulators publish changes
  • SC and NPPV3 security-cleared delivery personnel throughout
  • G-Cloud and Crown Commercial Service framework aligned

See HEX 165 in action

Book a demo and see how the platform handles your specific regulatory requirements.

Book a Demo