AI systems are reaching patients, applicants, and children through borders nobody is standing at.
AL360° Oceans - the platform
Scan the system. Issue the passport.
Grant the visa.
AL360° Oceans applies border control to AI. Nothing reaches health, financial, or minors' data without an evidence scan, an evidence passport, and a context visa for the exact deployment it operates in.
AL360° Oceans - the border
Currents - the scan
23 systems opened · 6 touch Art. 9 data
Ripples - the passport
18 issued · 5 blocked on Art. 10 evidence
Droplets - the visa
11 contexts cleared · 2 refused
Seal Review
3 high-consequence decisions under seal
Atlas - the register
Next expiry: 14d · 1 visa suspended
Governance begins at the border, not in the dashboard.
A model that is wrong about a patient is wrong about their treatment. Wrong about an applicant, and it is wrong about their livelihood. Wrong about a child, and it is wrong for the rest of their record. AL360° Oceans exists to ensure no system reaches those three contexts without being scanned, passported, and cleared for the exact deployment it operates in.
The scenario is illustrative and labelled as such throughout.
The platform
Three services. One doctrine.
Currents, Ripples, and Droplets are the three border-control steps. Seal Review, Wakes, and Atlas are what carry their output to a reviewer and hold it there.
Currents
The evidence scan - step 1
Opens the file on every AI system reaching health, financial, or minors' data. Names the systems, classifies them provisionally against Annex III, and registers what is not yet proven - distribution shift, unexamined bias, unaudited RAG corpora, unlogged agents.
Fixed price · Self-serve · Feeds the passport queue
Ripples
The evidence passport - step 2
The durable, portable evidence record one AI system carries. Identity, data categories, GDPR Art. 6/9/22 basis, Art. 35 DPIA, AI Act Art. 10 bias examination, Art. 14 oversight design, Art. 15 accuracy - created once, structured for reuse at each review.
12 sections · Recorded evidence · Expires by default
Droplets
The context visa - step 3
Clearance for ONE deployment context, on THIS data, under stated conditions. Tool allowlist, egress boundary, Art. 14 oversight gates, Art. 12 event logging, and a hard expiry.
One context only · Time-bound · Expires by default
Seal Review
Human review, under seal
The highest-consequence contexts do not clear themselves. DPO, CISO, and procurement each hold only the decisions their role can defend. Every decision is recorded with actor, timestamp, rationale, and the conditions attached.
Role-bound queues · Logged decisions · Exportable trail
Wakes & Atlas
The export and the register
A Wake is the evidence export that travels to a reviewer - a supervisory authority, a hospital trust, a notified body. Atlas is the register behind it: every system, passport, visa, and open gap, in one file that stays open.
Evidence exports · Systems, passports, and gaps · One open register
Data boundary
Diagnostics where the data lives
AffectLog does not ask for clinical records, financial records, minors' data, prompts, or model weights. You supply the evidence about a system, and it is recorded against that system.
No raw data required · Organisation isolation · Hash-linked log
The doctrine
Scan the system. Issue the passport. Grant the visa.
The order is not a preference. Each step is the precondition for the next: a passport cannot be issued on a system nobody has scanned, and a visa cannot be granted against a passport that does not exist.
Scan
Currents opens the file: which AI systems reach health, financial, or minors' data - and what is unproven about each.
Issue
A Ripple records what is proven: legal basis, bias examination under Art. 10, oversight under Art. 14, accuracy under Art. 15.
Grant
A Droplet clears ONE context: this data, these tools, these oversight gates, this expiry date. A second context needs a second visa.
Seal
The highest-consequence decisions go to human review under seal - recorded with actor, rationale, and conditions.
Expire
Every visa expires. Renewal is a new decision, made on current evidence. Nothing renews in silence.
Who uses AL360° Oceans
Built for the people who must defend the decision.
Procurement
No passport, no purchase. Require a Ripple before an AI supplier reaches your data, and refuse the renewal when the evidence has expired but the contract has not.
See howDPO & privacy
Art. 9 health data, Art. 8 minors' data, Art. 22 automated decisions, Art. 35 DPIAs - as structured fields on a passport, not as prose in a vendor's PDF.
See howCISO & security
Tool allowlists, credential scope, egress boundaries, and Art. 12 event logging for every agent - declared at grant, recorded with the decision, and expiring by default.
See howAI providers
Issue one Ripple. Present it to a hospital trust, a bank's third-party risk function, or a competent authority - instead of rebuilding the evidence for each.
See howThe difference
An unguarded border, and a guarded one.
Without AL360° Oceans
- No register of which AI systems reach Art. 9 or Art. 8 data
- Vendor attestations held on file in place of findings
- No record of who cleared which system, on what basis
- Agents acting on core systems with no owner, scope, or expiry
- A silent model swap invalidates the file and nobody is told
- Every audit rebuilds the evidence from nothing
With AL360° Oceans
- Currents opens the file - Atlas keeps it open
- Ripples record what is demonstrated, article by article, and what is not
- Seal Review logs the decision: actor, rationale, conditions, timestamp
- Droplets clear ONE context - time-bound, gated, expiring by default
- A model change is recorded as a reason to re-review the passport
- A Wake carries the evidence to the reviewer, already assembled
Design decisions, not caveats
Evidence travels. Raw data stays where it lives.
Evidence travels. Raw data does not.
Every diagnostic yields an Evidence Record - the finding, not the data behind it. Raw export is disabled by default and cannot be enabled from the browser.
Nothing clears itself
No system reaches health, financial, or minors' data without a scan, a passport, and a visa for the exact context it operates in. Absence of evidence blocks; it does not default to allow.
Decisions leave a hash-linked trail
Clearance decisions are written to a per-organisation, append-only, hash-linked event log - actor, role, timestamp. An edit, a deletion, or a reordering breaks the chain when it is verified.
Every clearance expires
Passports expire. Visas expire sooner. Renewal is a new decision on current evidence - not a silent rollover.
Addressed
AL360° Oceans - the four objections we hear.
“We already run a vendor risk questionnaire process.”
A questionnaire collects claims from the party with the least incentive to disclose. AL360° Oceans records evidence: a scan that names what is operating, a passport that records what is demonstrated against named articles, and a visa that says where the system may act and until when. A claim does not expire. A visa does.
“We only have two or three AI systems to govern.”
That is the number that is known. A scan routinely opens files on model APIs embedded in existing products, RAG assistants built by a single team, and agents holding credentials nobody registered. The systems that reach sensitive data are rarely the ones that were procured as AI.
“Why three artifacts rather than one governance record?”
Because they answer three different questions and fail independently. The scan asks what is running. The passport asks what is proven about it. The visa asks whether it may operate HERE, on THIS data. A single record collapses them - and collapsing them is how a model validated for adult intake ends up scoring paediatric patients.
“Our data cannot leave our environment for diagnostics.”
It does not need to. AffectLog does not ask for raw records, corpora, prompts, or weights. You supply evidence about the system - documents, summaries, results - and that is what is recorded.
Start at step one
Open the file on your AI estate
before a competent authority does.
Every AI system reaching health, financial, or minors' data - named, owned, and matched to the evidence it does not yet carry. Then issue the passports, then grant the visas.
AffectLog provides technical and operational evidence to support AI access decisions. Not legal advice, certification, notified-body conformity assessment, or regulatory approval.