Platform definition
What is AIRAS Cloud?
AIRAS Cloud is the Irish enterprise AI governance and risk-assurance platform operated by AFRH Consulting Limited (CRO 798243). It connects AI discovery and inventory, accountable ownership, deterministic assessment, controls and evidence, authorised human decisions and continuing oversight. Its governing principle is: AI does not approve AI.
Author accountable for content: Richard Higgins · Designated reviewer: Amy Feery (owner review pending) · Source checked 2026-10-28 by the development assistant. No human review or independent assurance is claimed.
Short answer
AIRAS Cloud is the Irish enterprise AI governance and risk-assurance platform operated by AFRH Consulting Limited (CRO 798243). It connects AI discovery and inventory, accountable ownership, deterministic assessment, controls and evidence, authorised human decisions and continuing oversight. Its governing principle is: AI does not approve AI.
Source checked 2026-10-28; owner review pending. General information for governance planning, not legal advice.
Key points
- AIRAS development began in 2021; the operating company was incorporated on 24 September 2025.
- Richard Higgins is Founder and Chief Executive; Amy Feery is Co-Founder and Chief Product Officer.
- Discovery identifies candidates; it does not authorise an AI use.
- Internal source verification is not independent certification or a penetration test.
The gap between a policy and an operating record
An AI policy can describe acceptable use without establishing which systems are actually in use, what data they handle or who accepted their consequences. AIRAS Cloud is designed to connect those facts to the evidence and decisions that follow. The unit of governance is a particular AI use in an organisational context, not a vendor name or a general statement of maturity.
The platform covers traditional machine learning, generative AI, supplied AI capabilities and agents. The questions differ by context, but the need for an accountable owner and a defensible decision remains. A productivity assistant and a recruitment-ranking capability must not inherit the same conclusion merely because both came from approved software.
What the lifecycle produces
The purpose is continuity: a later reviewer should be able to distinguish what was known, which rules applied and who decided. An exported record supports scrutiny; it is not itself a declaration that every legal obligation has been satisfied.
For a governance team, the practical question is whether the record connects the actual capability to its owner and assessment. A list of software purchases is insufficient when an existing supplier can add AI later. A decision pack is useful only when it reflects the confirmed deployment context and unresolved facts rather than generic vendor assurances.
- An inventory entry with purpose, ownership and source evidence.
- Assessment inputs and results tied to the relevant approved ruleset version.
- Applicable controls, evidence responsibilities and missing-information states.
- An authorised human review and decision, with rationale and conditions.
- Monitoring, incident and reassessment context, plus exportable records.
How Shadow AI Defence and ARIE relate
Shadow AI Defence examines authorised metadata and evidence for potentially ungoverned AI. Coverage depends on the supplied sources. Findings require human confirmation, and a named human request governs the handoff to core intake. Detection confidence is not a regulatory classification or an operational risk score.
ARIE supplies deterministic, version-controlled assessment reasoning within the governed lifecycle. It does not replace the authorised decision-maker. The platform connects that reasoning to evidence, controls and ownership rather than treating an AI-generated opinion as an approval.
Identity, scope and limits
AIRAS Cloud is distinct from unrelated projects or organisations using the AIRAS acronym. It is operated in Ireland by AFRH Consulting Limited, incorporated on 24 September 2025, CRO 798243. Product development began in 2021; that is not the legal incorporation date.
AIRAS Cloud supports governance and regulatory readiness. It does not provide legal advice, certify compliance, guarantee regulatory acceptance, or promise complete discovery of every AI capability. Public examples use illustrative or synthetic data. Production suitability depends on the agreed deployment, configuration, evidence and release gates; source tests alone cannot establish live tenant isolation or independent assurance.
Primary sources
How AIRAS Cloud supports this
Related answers
Turn the regulation into an operating record
AIRAS Cloud gives Irish and EU organisations one accountable place to discover AI, determine scope, classify defensibly, assign controls and evidence every decision.
No commercial commitment. No confidential information required.