AI systems are reaching patients, applicants, and children through borders nobody is standing at.
AL360° Oceans — the platform
Scan the system. Issue the passport.
Grant the visa.
AL360° Oceans applies border control to AI. Nothing reaches health, financial, or minors' data without an evidence scan, an evidence passport, and a context visa for the exact deployment it operates in.
AL360° Oceans — the border
Currents — the scan
23 systems opened · 6 touch Art. 9 data
Ripples — the passport
18 issued · 5 blocked on Art. 10 evidence
Droplets — the visa
11 contexts cleared · 2 refused
Seal Review
3 high-consequence decisions under seal
Atlas — the register
Next expiry: 14d · 1 visa suspended
Governance begins at the border, not in the dashboard.
A model that is wrong about a patient is wrong about their treatment. Wrong about an applicant, and it is wrong about their livelihood. Wrong about a child, and it is wrong for the rest of their record. AL360° Oceans exists to ensure no system reaches those three contexts without being scanned, passported, and cleared for the exact deployment it operates in.
The platform
Three services. One doctrine.
Currents, Ripples, and Droplets are the three border-control steps. Seal Review, Wakes, and Atlas are what carry their output to a reviewer and hold it there.
Currents
The evidence scan — step 1
Opens the file on every AI system reaching health, financial, or minors' data. Names the systems, classifies them provisionally against Annex III, and registers what is not yet proven — distribution shift, unexamined bias, unaudited RAG corpora, unlogged agents.
Fixed scope · 10 working days · Feeds the passport queue
Ripples
The evidence passport — step 2
The durable, portable evidence record one AI system carries. Identity, data categories, GDPR Art. 6/9/22 basis, Art. 35 DPIA, AI Act Art. 10 bias examination, Art. 14 oversight design, Art. 15 accuracy — issued once, presented at every review.
12 sections · Sealed Evidence Records · Expires by default
Droplets
The context visa — step 3
Clearance for ONE deployment context, on THIS data, under stated conditions. Tool allowlist, egress boundary, Art. 14 oversight gates, Art. 12 event logging, hard expiry, and revocation in a single action.
One context only · Time-bound · Revocable
Seal Review
Human review, under seal
The highest-consequence contexts do not clear themselves. DPO, CISO, and procurement each hold only the decisions their role can defend. Every decision is recorded with actor, timestamp, rationale, and the conditions attached.
Role-bound queues · Sealed decisions · Exportable trail
Wakes & Atlas
The export and the register
A Wake is the stamped, sealed evidence export that travels to a reviewer — a supervisory authority, a hospital trust, a notified body. Atlas is the register behind it: every system, passport, visa, and open gap, in one file that stays open.
Stamped exports · Immutable register · Offline-verifiable
Local & federated evidence
Diagnostics where the data lives
Clinical, financial, and minors' data does not leave the perimeter — not even for a compliance check. Diagnostics execute in your own infrastructure and export only a signed Evidence Record. The signing key never leaves.
Self-hosted · Record-only egress · Ed25519 signed
The doctrine
Scan the system. Issue the passport. Grant the visa.
The order is not a preference. Each step is the precondition for the next: a passport cannot be issued on a system nobody has scanned, and a visa cannot be granted against a passport that does not exist.
Scan
Currents opens the file: which AI systems reach health, financial, or minors' data — and what is unproven about each.
Issue
A Ripple records what is proven: legal basis, bias examination under Art. 10, oversight under Art. 14, accuracy under Art. 15.
Grant
A Droplet clears ONE context: this data, these tools, these oversight gates, this expiry date. A second context needs a second visa.
Seal
The highest-consequence decisions go to human review under seal — recorded with actor, rationale, and conditions.
Revoke
Drift, a silent model swap, or a failed diagnostic suspends the visa before the next action. Nothing renews in silence.
Who uses AL360° Oceans
Built for the people who must defend the decision.
Procurement
No passport, no purchase. Require a Ripple before an AI supplier reaches your data, and refuse the renewal when the evidence has expired but the contract has not.
See howDPO & privacy
Art. 9 health data, Art. 8 minors' data, Art. 22 automated decisions, Art. 35 DPIAs — as structured fields on a passport, not as prose in a vendor's PDF.
See howCISO & security
Tool allowlists, credential scope, egress boundaries, and Art. 12 event logging for every agent — declared at grant, enforced at runtime, revocable in one action.
See howAI providers
Issue one Ripple. Present it to a hospital trust, a bank's third-party risk function, or a competent authority — instead of rebuilding the evidence for each.
See howThe difference
An unguarded border, and a guarded one.
Without AL360° Oceans
- No register of which AI systems reach Art. 9 or Art. 8 data
- Vendor attestations held on file in place of findings
- No record of who cleared which system, on what basis
- Agents acting on core systems with no owner, scope, or expiry
- A silent model swap invalidates the file and nobody is told
- Every audit rebuilds the evidence from nothing
With AL360° Oceans
- Currents opens the file in 10 working days — Atlas keeps it open
- Ripples record what is proven, article by article, sealed and signed
- Seal Review logs the decision: actor, rationale, conditions, timestamp
- Droplets clear ONE context — time-bound, gated, revocable in one action
- Model change detected; the passport reverts and the visa suspends
- A Wake carries the sealed evidence to the reviewer, already assembled
Design decisions, not caveats
Evidence travels. Raw data stays where it lives.
Evidence travels. Raw data does not.
Every diagnostic yields a signed Evidence Record — the finding, not the data behind it. Raw export is disabled by default and cannot be enabled from the browser.
Nothing clears itself
No system reaches health, financial, or minors' data without a scan, a passport, and a visa for the exact context it operates in. Absence of evidence blocks; it does not default to allow.
Immutable after issue
Evidence Records are signed with an Ed25519 key and cannot be amended. A reviewer verifies authenticity offline, without re-running the diagnostic or trusting the issuer.
Every clearance expires
Passports expire. Visas expire sooner. A model swap, a drift alert, or a failed diagnostic suspends the clearance before the next action — not at the next audit.
Addressed
AL360° Oceans — the four objections we hear.
“We already run a vendor risk questionnaire process.”
A questionnaire collects claims from the party with the least incentive to disclose. AL360° Oceans collects findings: a scan that names what is operating, a passport that records what is proven against named articles, and a visa that says where the system may act and until when. A claim cannot be revoked. A visa can.
“We only have two or three AI systems to govern.”
That is the number that is known. A scan routinely opens files on model APIs embedded in existing products, RAG assistants built by a single team, and agents holding credentials nobody registered. The systems that reach sensitive data are rarely the ones that were procured as AI.
“Why three artifacts rather than one governance record?”
Because they answer three different questions and fail independently. The scan asks what is running. The passport asks what is proven about it. The visa asks whether it may operate HERE, on THIS data. A single record collapses them — and collapsing them is how a model validated for adult intake ends up scoring paediatric patients.
“Our data cannot leave our environment for diagnostics.”
It does not. Diagnostics run inside your perimeter — on-premise, in your VPC, or air-gapped. Only the signed Evidence Record crosses the boundary: the finding, never the record, the corpus, the prompt, or the weights. The signing key stays with you and the result is verifiable offline.
Start at step one
Open the file on your AI estate
before a competent authority does.
Ten working days. Every AI system reaching health, financial, or minors' data — named, classified, and matched to the evidence it does not yet carry. Then issue the passports, then grant the visas.
AffectLog provides technical and operational evidence to support AI access decisions. Not legal advice, certification, notified-body conformity assessment, or regulatory approval.