Independent review of a third-party AI implementation at a major bank
- 01Authentication weaknesses
- 02Prompt-injection exposure
- 03Stability under production load
Redesign endorsed by the bank's security and change-management teams.
PiR2-IT
Start an engagement
PiR2-IT designs, secures and governs critical digital systems for banks, governments and defence programmes — from strategy to controlled delivery. We also build and operate our own products — a custom AI engine, the GARI governance framework and a DPI trust platform — tailored to each client.
Architecture decisions, control structures and delivery plans built to survive audit, security review and executive scrutiny.

Rapid assessment of current state, delivery friction, architecture debt and the decisions that need clarifying first.
Reference architecture, governance model, control points, sequencing logic and evidence structures for your context.
Design authority, prototype validation and assurance reviews as the programme proceeds.
Product · in production & support
Digital Public Infrastructure Trust Platform
DLT, Zero Trust and a customisable open-source AI engine for trusted national-scale services.
Product · in production & support
GARI — Governance Execution Framework
Independent analytical framework: mandate alignment, accountability chains, real-time audit readiness and service outcomes.
6implemented
29in progress
27in pipeline
Advanced demonstrator
AI-Enabled Modular UAS — Governed Drones
Self-healing swarm: up to 8 masters and 64 low-cost sub-vehicles, C4ISR integration, GNSS-denied navigation — critical actions under human authorisation.
Prototype platform
Autonomous Mobility Platform
Integrated low-latency platform: sensor fusion, vision AI, two-way C3 integration and tactical comms under HITL. No weaponry.
Product · in production & support · 45%
eAI-PR / MAPE Editorial Ecosystem
AI publishing governance for multilingual compliance at institutional scale.
Product · in production & support
Custom AI Engine
Governance, investment, business scaling, hyperautomation and a document factory — ethics by design. US$2.3M+ funding secured, 73 experts.
Product · in production & support
Agentic AML Hyperautomation
Agentic AI for anti-money laundering: KYC and UBO resolution, alert triage, investigations and SAR drafting with human sign-off. Implemented in 16 financial institutions.
Product · live demo
Cyber Defence Fusion
AI threat correlation, mission assurance and governed countermeasures, with a red / blue cyber range. Similar in approach to CyberPro.
Delivered · 2025
Quantum Readiness & Post-Quantum Migration
Quantum-readiness advisory for a Gulf sovereign digital programme, plus NIST PQC (FIPS 203/204/205) migration roadmaps and PKI/HSM crypto-agility.
Third-line authority across PAM/IAM, network security, DLP, SIEM/SOAR and DDoS — aligned to PCI DSS, ISO 27001, DORA, NIS2 and SWIFT CSP. Client identities are withheld.
Enterprise architecture for banking → · Agentic AML Hyperautomation — 16 institutions →
Redesign endorsed by the bank's security and change-management teams.
Architecture and delivery guidance for sovereign, interoperable DPI — vendor-neutral and built on open-source building blocks.
AI-assisted case routing live, aligned with the EU AI Act.
Architecture later acquired by a top-5 global IT corporation for productisation.
Core platforms, payments, data and regulated change programmes.
Banking architecture →Identity, trust services, interoperability and government modernisation.
DPI advisory →Trust boundaries, assurance and resilience for high-consequence systems.
Defence cybersecurity →Governed AI from pilot to production in regulated environments.
AI governance →When architecture quality, governance quality and delivery sequencing materially affect cost, risk or sponsor confidence.
No. Advisory-led, delivery-aware: reviews, governance packs, control design, integration logic and prototypes.
Yes. Work is kept separate from system integration and software delivery. Partnerships are commercial, not advisory.
A scoping conversation, usually leading to an architecture review or problem-framing session.
PiR2-ITIndependent consulting for institutions, regulated sectors and high-trust programmes.