ABOS Talk to us

For regulated and audited companies

The AI Compliance Gateway

Every AI prompt on the audit trail; sensitive data stays in-house.

Your people already paste client and company data into AI tools. ABOS sits between them and the models, records every request, and keeps sensitive data inside the company.

Talk to us about a pilot See how it works

The broker types

Mortgage options for Jana Nováková, 41, net income 62,000 CZK

What leaves the firm

Mortgage options for [CLIENT_1], 40–45, net income 50–75k CZK

The broker reads

The full answer, with Jana Nováková put back in

Example: a mortgage broker at a financial intermediary, with a fictional client
Line drawing: a compliance officer at her desk, startled, as an oversized sealed envelope arrives above her laptop.

Example: a broker network, Monday 9:00

An email from the regulator lands.

“Document every use of AI involving client data by your agents in the last twelve months.”

You are its compliance officer, and you know the answer. Everywhere, and nowhere. Your agents use AI every day, yet there is no record to show.

The request targets the firm, not the agent. The licensed firm answers to the supervisor for every tied agent working under its license.

Swap the regulator for a customer’s auditor, a NIS2 supervisor or your own board. The question stays the same: who used AI on which data, and where did it go?

How it works

Every request leaves a record you can hand over.

ABOS records, sanitizes and sends. Your people keep working with the AI tools they already use.

  1. Inside the company

    1Log

    Every request is tied to a person and written to a tamper-evident log.

  2. Inside the company

    2Replace

    Personal and confidential data is swapped for placeholders before anything leaves.

  3. Outside the company

    3Send

    Only placeholders leave, and only to the model providers your policy approves.

  4. Inside the company

    4Restore

    The real values are put back into the answer, inside the company.

The log is the product. The gateway just gets you one.

What it delivers

Evidence, not alerts.

Your people

A full, useful answer

Jana Nováková, 41,
62,000 CZK

The model

Never sees the client

[CLIENT_1], 40–45,
50–75k CZK

The compliance officer

Evidence to hand to a regulator or auditor

Who asked, what left,
where, in what form

The examples follow the broker from the top of the page.

Your people keep the answer. Your clients keep their privacy. The company keeps the record.

Running today

A working gateway, shown by its own log.

This is the compliance log of the ABOS gateway, running on demo data for a fictional broker network. One request is opened step by step: the prompt as the broker typed it, what was detected, which placeholder replaced each value, and the exact text that went to the model.

The ABOS compliance log with one request opened. The prompt as received reads: My client Karel Beneš, 41, earns 62,000 CZK a month and has 450,000 CZK in savings. Detection finds one person and two amounts, sanitization swaps each for a placeholder, and the exact payload sent to the external model contains only the placeholders.
Fictional agents and clients. The values are shown through a logged vault read. Swipe to see the whole log. Open full size

Why now

The obligations have landed. The evidence has not.

The rules differ between the EU and the US. The question they put to the company is the same.

European Union

  1. Since Oct 2024

    NIS2 national laws

    Cyber duties reach the mid-market and its supply chain.

  2. 17 Jan 2025

    DORA applies to financial firms

    Every external AI provider is an ICT third party.

  3. Aug 2025 to Dec 2027

    The AI Act phases in

    Logging and human-oversight duties arrive in steps, most of them for high-risk uses.

United States

  1. Nov 2025

    SEC 2026 exam priorities

    Supervision of AI use and the accuracy of AI claims, named for advisers.

  2. 2026

    FINRA oversight report

    Keep prompt and output logs, and supervise AI like any other communication.

  3. 3 Jun 2026

    Regulation S-P, smaller firms

    Customer-data safeguards and incident duties now bind the small firm.

Model vendors will solve their own liability. Never your audit obligation.

EU: Directive (EU) 2022/2555; Regulation (EU) 2022/2554; Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744. US: SEC Division of Examinations, 2026 examination priorities; FINRA 2026 Annual Regulatory Oversight Report; Regulation S-P amendments, compliance date for smaller entities 3 Jun 2026.

Your security stack

Works alongside your security gateway, not instead of it.

Security tools reduce risk. ABOS helps you demonstrate compliance.

Security gateways

Built for
The CISO of a large enterprise
Sensitive data
Masked one way, or the request is stopped
What you keep
Alerts

ABOS

Built for
The compliance officer of a regulated or audited company
Sensitive data
Masked, sent, and restored in the answer
What you keep
Evidence a regulator can read

First pilot

Next time the email comes, you pull the report.

We start with financial intermediaries in Czechia and Slovakia and are selecting our first pilot network.

If your company has to account for its use of AI to a regulator, an auditor or a customer, get in touch. We will show you the gateway running on your own kind of requests.

info@abos.pro
Line drawing: the same compliance officer, calm, handing over a report.

Team

Two founders who’ve done it before.

Business

Peter Végh

Six years as CPO in a regulated environment, building a digital bank from scratch to multi-country operations. 3× founder, 2 exits.

Technology

Sergej Fedorovich

29 years in technology. Two decades of enterprise architecture at Amdocs and BNP Paribas. Now CIO for banking and fintech ventures.