WELCOME TO
Trusted, audit-grade AI
for risk management.
Dive in
Connect with us
Trusted, audit-grade AI
Sections
00
Start
01
Problem
02
Demands
03
Product
04
Outcomes
05
Proof
06
Packages
07
Founders
08
Next step
The problem
Risk is growing faster than the ability to manage it but AI's game-changing potential remains locked until its answers can be trusted.
More frameworks
More jurisdictions
More evidence
Who feels it most
Finance
Banking
Energy
Transportation
Technology
Defense
Critical infrastructure
TWO DEMANDS
Every regulated enterprise wants to use AI.
Every regulator and auditor says: prove it.
What enterprises want
Speed
Continuous compliance, not annual scrambles.
Lower cost
Less analyst time on evidence collection.
Better insight
Automated reasoning across frameworks.
Scale
More frameworks, more vendors, more regulators.
Lift
Free experts to focus on actual risk reduction.
What auditors and regulators demand
Audit trail
Examination-grade — every prompt, every response.
Modelling
OSFI E-23, SR 11-7, NIST AI RMF, EU AI Act, ISO 42001, AIDA.
Traceability
Role-based access, data lineage, and versioning of policies, controls, and AI decisions (PIPEDA, GDPR, CPPA).
Trusted environment
Sovereign deployment options where required (DORA, OSFI B-13, NIST CSF 2.0).
The product
Trusted, auditable results
Regulated reasoning, traceability, and explainability for auditors.
Continuous AI reasoning, not annual checks
Recommendations, insight, automated action, and reporting — running all the time.
Plugs into existing tech stacks
SharePoint, email, security telemetry via API, and external threat feeds via Tidal Point.
Outcomes
Better risk cover, at a fraction of the cost and effort.
Full-time access to a risk manager, at software cost.
Risk Assist is not AI bolted onto a legacy GRC tool. It reads what your teams produce, cites its evidence, and keeps working between reviews — the expertise of a senior risk manager, available continuously rather than a few weeks a year.
Lower cost of assurance
Evidence gathering, framework mapping, and write-up absorbed by the platform instead of billed by the hour.
More capacity from the team you have
Specialists spend their time on judgment and remediation — fewer people needed to cover far more ground.
Less exposure, sooner
Gaps between what was planned and what was built surface while they are still cheap to fix — and initiatives stop waiting in the review queue.
EASY Simple workflows, straightforward implementation.
FLEXIBLE New regulations and frameworks added with confidence.
TRUSTED Audit-ready, evidence-cited, hallucination-free.
Proof in production
What our customers are saying.
Risk Assist is already deployed in regional and major banks, as well as financial organizations in North America and Europe.
"What started as a discussion on a potential idea has quickly evolved into a solution that is already demonstrating tangible value within the bank.
You approached this initiative as true partners, and that has made all the difference."
You approached this initiative as true partners, and that has made all the difference."
Executive Sponsor, Tier-1 North American Bank
Demonstrates tangible value
Simplifies complex activities
Accelerates risk assessments
Improves consistency across assessments
Frees teams for higher-value analysis
Packages
Three ways to put Risk Assist to work.
Risk Assist Workflows
Risk intelligence inside the tools you already use.
UI, API, and MCP connectors into ticketing systems, internal portals, and custom apps
You bring the workflow; Risk Assist brings the analysis
Lightest-weight option — no new front-end for end users to learn
Best fit: teams with their own tooling and dev resources
Risk Assist Applications
A ready-to-use, end-to-end SaaS deployment.
Document intake, evidence-based risk identification, scoring, suggested controls, and reporting
Pre-built Risk Analyst, PM/PO, and Cyber Analyst views
Connected to the data sources you specify — no integration work
Best fit: teams who want a complete solution out of the box
Custom Agents
Risk Assist, extended to speak your language.
Everything in Applications, plus extension of the platform itself
Custom taxonomy and framework alignment
New data types and connectors built to spec, for specific regulatory environments
Best fit: strategic accounts shaping the roadmap
Included in every package
Data residency
Your data never trains models
Independent assurance
Deployment options
Access and lineage
About the founders
Built by operators who built the field.
85+ years combined cyber security experience. Complex AI automation and risk management by risk and technology experts — not checkbox automators.
Andrew Loschmann
Co-founder & CEO
25 years in industry. Co-founded Field Effect, scaling from outset to thousands of customers globally. Technical and leadership experience across Canadian and US Security & Intelligence agencies. Holds a cyber security technology patent.
PRIOR FOUNDER
FIVE-EYES S&I
PATENTS
BOARDS
Brad Peterson
Co-founder & COO
30 years in industry. Led teams to develop internationally-deployed endpoint agent technology across Five-Eyes countries. Panel member for several published cyber security standards for Canadian SME businesses.
ENDPOINT
FIVE-EYES S&I
CSO
Dr. David Whyte
Co-founder & CTO
30 years in industry. PhD Computer Science, MS Systems Engineering — MIT. Ex-Technical Director of Cyber Defence, Canadian intelligence. Former CISO of the world’s oldest international bank. MIT GenAI educator; chairs a national cyber-education committee.
MIT
CISO
GENAI
FIVE-EYES S&I