What we do
01  Advanced Infrastructure 02  Applied AI & Data 03  AI Cybersecurity 04  AI Assurance
Engagements
AI estate inventory Assurance review
Industries
Financial Services Government & Public Sector Energy & Utilities Telecommunications Healthcare & Life Sciences Transport & Logistics Industrial & Manufacturing Retail, Hospitality & Real Estate
Research
The Trust Maturity Model The GCC Assurance Index Readiness self-assessment Case studies Perspectives Sector briefings Technology evaluations
Company
About us Partners Events Careers Contact العربية Talk to our team
What we do  ·  Applied AI & Data

The AI decides. Who answers for it?

AI put to work on the processes that carry real cost and real risk — built to a level of autonomy the controls can actually support, with a named person accountable at every gate.

6–16 WEEKSA WORKING SYSTEM, NOT A PILOTBUILT BY US · GRADED BY SOMEONE ELSE
Why this pillar exists

Most programmes do not fail on the model.

They fail on the distance between what the system was allowed to do and what anybody had built the controls to survive. That distance is measurable, and it is the thing we manage.

01

Autonomy outruns the controls

A system reaches the rung where it acts on its own months before anybody writes the limits, the log or the stop. Nothing goes wrong until it does, all at once.

02

Nobody is accountable at the gate

There is an approval step, and there is nobody whose job it is to decline. An approval that cannot be refused is a button.

03

The data was never the strong part

The model is scrutinised for months. The extract it is standing on has not been reconciled since it was built, and nobody is looking at it.

The ladder

Five rungs. Each one is earned, not assumed.

Autonomy is not a switch. It is a ladder, and every rung has a named control that has to exist before you stand on it. Choose a rung.

AUTONOMY— OF 5 RUNGS EARNED
Select a rung

Five levels of autonomy. Each one is a different system with different consequences, and each one has a control that has to exist before you stand on it.

Most programmes fail because a system was placed on rung four while the controls of rung two were still being written. Applied AI & Data exists to keep those two things in step.

Applied AI & Data

Three ways in.

Three engagements, sold independently and architected as one. Start with the question you can name.

The boundary

We build it. We do not grade our own work.

Three moves. Two of them are ours, and the one in the middle is deliberately somebody else’s.

MOVE 01 — OURS

We build and run it

Design, integration and operation of the system, with a named human accountable at every gate that matters. This is delivery work and we do not pretend otherwise.

MOVE 02 — NOT OURS

Somebody else forms the opinion

The assurance opinion on anything we built is not written by the team that built it, and where you need it to carry weight externally, not by Orvix at all. A firm that audits its own delivery is offering you a marketing document.

MOVE 03 — OURS

We remediate what the review found

We fix what the independent review says is wrong, and the fix is re-examined by the same reviewer rather than signed off by us.

This is the same independence test we apply to other people’s vendors. It would be difficult to argue for it and then exempt ourselves.
How we engage

Defined engagements with a deliverable at the end.

Every engagement in this pillar is scoped, fixed-fee and finishes with something you can put in front of somebody else.

TYPICAL DURATION
6–16 weeks
DELIVERABLE
A running system and its evidence
DELIVERED
Hybrid, with in-country delivery where required
INDICATIVE FEE
[FEE BAND — pending sign-off]
Questions we are asked

Before you ask us.

Does Orvix build, or advise?
In this pillar, builds. This is delivery work with a named duty owner and an operational handover, and we do not describe it as advisory. The independence commitment here is different: we do not write the assurance opinion on anything we built.
Why would you refuse to assure your own work?
Because the sharpest thing we say about other suppliers is that no organisation should audit its own estate. That argument does not survive us making an exception for ourselves, and an opinion written by the builder is worth very little to a regulator anyway.
Can you work on top of a model we already have?
Yes, and often that is the right answer. The rung the system is standing on matters far more than which model is underneath it.

Start with the rung, not the model.

Thirty minutes. Tell us what the system is allowed to do without asking, and we will tell you which controls that rung requires.

Book a 30-minute scoping call

ORVIX · INDEPENDENT AI & TECHNOLOGY ASSURANCE · WE DISCLOSE EVERY COMMERCIAL RELATIONSHIP ON THE PAGE FOR THE SERVICE IT BELONGS TO. WHERE LICENSING IS REQUIRED, DELIVERY IS PERFORMED BY NAMED PARTNERS UNDER THEIR OWN LICENCE.