Discovery without automated approval
AIRAS Cloud, operated in Ireland by AFRH Consulting Limited (CRO 798243), describes Shadow AI Defence as part of AIRAS Cloud 2.0.0. The 24 October 2026 public workflow sets out seven steps: authorised evidence, identification of potential AI, human verification, governed registration and context, assessment, authorised human decision and continuing oversight.
The release focuses on overlooked capabilities, including AI within already-approved enterprise software. A finding is a candidate, not a regulatory conclusion or permission to use AI. Coverage depends on the authorised sources and the review actually performed.
Boundaries retained in the implementation
Availability is organisation- and configuration-dependent. This announcement is not a statement that every integration or customer environment is activated or live-verified. It does not authorise a deployment or alter the release gates.
- Metadata-only Enterprise AI Discovery does not collect prompts, emails, browsing history or source code.
- Signed-source reports are checked for authenticity, freshness and replay protection.
- Discovery retains independent data and audit boundaries.
- A named human request governs handoff to core intake.
- ARIE methodology and authorised human decision ownership remain protected.
Verification and assurance position
Internal source tests and implementation evidence support bounded engineering claims. They are not an external penetration test, certification or independent assurance. Live identity, tenancy, recovery and deployment behaviour require their own accepted evidence; a source suite cannot stand in for those checks.
The Trust Centre records the assurance position. Public product examples and the founder's financial scenario are illustrative, not customer incident reports or claimed savings. AIRAS Cloud does not provide legal advice, certify compliance or guarantee regulatory acceptance.
Read the workflow and founder analysis
Richard Higgins' accompanying analysis explains why supplier approval is not necessarily assessment of an added AI capability. Read the workflow, the original article and the assessment boundaries before arranging a demonstration.