AL360° Oceans by AffectLog

Scan the system. Issue the passport. Grant the visa.

Step one and step two are self-serve: open the file with a Currents, issue the passport with a Ripple. Health, financial, and minor-facing deployments — and sovereign infrastructure — are scoped through proposal review.

Every path starts in the same place: six questions about the AI you run and the data it reaches. That scope is what sets the price — so the calculator shows you yours before anything is confirmed, and before anything is paid.

Sensitive-context work is scoped before it is sold. Where a system touches patients, applicants, or children, the evidence depth and the governance responsibilities are not the same in two organisations — so they are not priced as if they were.

AI Footprint Assessmentstep 3 / 6
Third-party model providers7
In-house models in production12
Agents with write or tool access3
Systems on an Annex III / Art. 6(1) route4
Data in scopeGDPR Art. 9 special category · Art. 22 automated decisions
Scope ResultGrowth Gateway
Ripples — 7 third-party providers, Annex IV pack each
Droplets — 3 agents with logged tool boundaries (Art. 12)
Seal Review — DPO, CISO, named Art. 14 oversight owner
Atlas register — Art. 49 EU database entries tracked
custom proposal · not a binding quote

Calculator

Proposal

Founder call

Self-serve — available now

Step 1 and step 2. Available today.

Open the file, then issue the passport. Both are self-serve — and both are priced on the scope you enter in the calculator, which you see in full before you confirm.

Currents — the evidence scan

Scope first

Priced on your scope

one-time

Step 1. Opens the file on every AI system reaching your data.

What happens next

  1. 1Six questions — your AI estate, the data it reaches, and what is forcing the timeline.
  2. 2Your scope and your price, on screen. Nothing is charged to see it.
  3. 3Confirm the scope, then pay. The amount is resolved server-side.

Best for: DPO · CISO · Procurement · AI governance lead

  • Every AI system, agent, and model API named and owned
  • Data-category map with GDPR Art. 9 and Art. 8 flags raised
  • Provisional EU AI Act Art. 6 / Annex III classification
  • Evidence gap register — Art. 10, 12, 14, 15
  • Provisional access decisions and the passport queue
  • The open file in Atlas, held after delivery

Certified secure · No amount from browser · AL360° Oceans by AffectLog

Ripple — the evidence passport

Scope first

Priced on your scope

per year, per system

Step 2. The record one AI system carries into every review.

What happens next

  1. 1Six questions — your AI estate, the data it reaches, and what is forcing the timeline.
  2. 2Your scope and your price, on screen. Nothing is charged to see it.
  3. 3Confirm the scope, then pay. The amount is resolved server-side.

Best for: AI providers · deployers · compliance and product leads

  • One passport per AI system — 12 sections, article by article
  • Legal basis, DPIA status, bias examination, oversight design
  • Sealed Evidence Records from diagnostics run in your perimeter
  • Wakes — stamped, sealed exports that travel to a reviewer
  • "Carries a Ripple" — the Ripple-issued verifiable credential
  • Expiry, model-swap detection, and re-issue workspace

Certified secure · No amount from browser · AL360° Oceans by AffectLog

Scoped proposal required

Health AI. Financial AI. Minor-facing AI.

The three contexts where a wrong model is wrong about a patient, a livelihood, or a childhood record. These are not sold from a checkout: the scope, the evidence depth, and the price are settled in review before any work — or any clearance — begins.

Wake Pack

Proposal

Scoped in proposal review

The stamped, sealed export that travels to a reviewer: model, data, security, hosting, and traceability — assembled for a named recipient.

Why review is required: The evidence a hospital trust accepts is not the evidence a supervisory authority asks for. The pack is scoped to who will read it.

Seal Review

Proposal

Scoped in proposal review

Human review, under seal, for the highest-consequence contexts: health AI, financial AI, and minor-facing AI.

Why review is required: GDPR Art. 9, Art. 22, and Art. 8 — with MDR, DORA, or DSA Art. 28 in parallel — impose different evidence frameworks and different liabilities. They are scoped before the work starts.

Oceans Operations

Proposal

Scoped in proposal review · annual

The standing border: Ripples issued and re-issued, Droplets granted and revoked, Wakes exported, Atlas held open across the estate.

Why review is required: Estate size, entity structure, SSO, and who holds revocation authority differ in every organisation — and determine what the platform must enforce.

Droplets — the visa add-on

Proposal

Scoped in proposal review · annual

Step 3 at scale: context visas for agents, copilots, and retrieval assistants — tool allowlists, Art. 14 oversight gates, Art. 12 event logging, revocation.

Why review is required: Tool boundaries, credential scope, egress limits, and the acts that must halt for a human are specific to each deployment context, and are confirmed before any agent runs.

Enterprise and partner

For institutions, authorities, and review practices.

Where the border is operated on behalf of others — a national authority, a multi-entity public body, a notified reviewer — the architecture and the revocation authority are settled in proposal, not in a checkout.

Oceans Sovereign

Proposal

Custom proposal

Sovereign evidence infrastructure for EU institutions, national competent authorities, and multi-entity public deployments. Diagnostics run inside the perimeter; only the signed Evidence Record leaves.

Why review is required: Data residency, air-gapped execution, federated evidence architecture, and cross-entity revocation authority are scoped per deployment.

Oceans Studio

Proposal

Partner proposal · annual

For advisory and technical-review practices issuing passports and reviewing visas across a portfolio of client organisations.

Why review is required: Client isolation, delegated review authority, and who may grant or revoke a visa on a client's behalf must be settled before any case opens.

Pricing is tailored to scope. Fixed-scope pilots available.

Scope estimator

Not sure where you are in the doctrine?

Six questions. One scope. The calculator tells you whether to scan, to issue, or to grant first — based on the AI you actually run and the data it actually reaches.

Step 01

Which side of the border?

Deployer, provider, review practice, or the team shipping the agent.

Step 02

Which step do you need?

Open the file, issue the passport, grant the visa — or all three, in order.

Step 03

Your AI estate

Systems, model APIs, RAG pipelines, agents, entities, and named reviewers.

Step 04

The context it reaches

Health data under Art. 9, financial decisions under Art. 22, or anything a minor can reach under Art. 8.

Step 05

What is forcing it

A regulator's question, a blocked DPO sign-off, an agent about to ship, or a renewal you cannot defend.

Step 06

Your scope

The recommended path, the evidence depth it implies, the timeline, and the next action.

The calculator produces a scope label and recommended next step — not a binding quote.

Before you choose

  • Self-serve covers step 1 and step 2 — the scan and the passport. Nothing else is sold from a checkout.

  • Prices are not listed here, because a price that ignores your scope is a guess. The calculator asks six questions and shows you the figure it produces — before you confirm anything.

  • Health AI, financial AI, and minor-facing AI go through proposal review. Where a system reaches a patient, an applicant, or a child, the scope is settled before the work begins.

  • AL360° Oceans produces technical and operational evidence. It is not certification, not a notified-body conformity assessment, and not regulatory approval.

  • Entitlements activate on a verified webhook event — never on a browser redirect, and never on a price the browser supplied.

Pricing is tailored to scope. Fixed-scope pilots are available. Self-serve plans use a two-step secure checkout — plan and price are resolved server-side. Quoted in EUR, excluding applicable taxes.

Start at step one.

The scan is the only step that can be taken without the others. Open the file, and the passport queue writes itself.