Frequently asked
questions.

Apex Audit is an AI governance platform that helps organisations see, control, prove and manage how AI operates across their business.

It provides visibility into AI systems, agents and workflows, helping governance teams understand what AI is doing, identify potential risks, apply organisational policies and maintain evidence of oversight.

Apex Audit is designed to help organisations adopt and scale AI while maintaining visibility, accountability and control.

As organisations adopt more AI, understanding how these systems behave, whether they follow organisational policies and who is accountable for their actions becomes increasingly difficult.

Traditional governance processes often rely on documentation, periodic reviews and information spread across multiple teams and systems. These approaches can leave gaps between what an organisation expects its AI to do and what actually happens during operation.

Apex Audit addresses this gap by bringing AI activity, governance controls, risk identification and accountability into a centralised platform.

No. Monitoring is only one part of what Apex Audit is designed to do.

Monitoring tells organisations what their AI systems are doing. Apex Audit goes further by helping governance teams understand whether those activities fall within approved boundaries, identify exceptions, coordinate oversight and maintain evidence of governance decisions.

The objective is not simply to observe AI, but to give organisations the information and tools needed to govern it.

No. Audit trails are an important part of Apex Audit, but they are not the entire product.

Apex Audit is designed to support governance throughout the operation of AI systems, from monitoring activity and evaluating controls to managing exceptions and assigning accountability.

The audit trail provides evidence of what happened, which controls applied and how the organisation responded.

Rather than focusing solely on documenting past activity, Apex Audit aims to help organisations govern AI as it operates.

Existing risk, compliance and security frameworks remain important, but many were developed around systems with relatively predictable behaviour.

AI systems can produce different outputs and take different actions depending on their instructions, context and the information they receive. This creates risks that may change during operation, even after an initial assessment.

Organisations therefore need ways to complement existing governance frameworks with continuous visibility into AI behaviour.

Apex Audit is designed to help bridge that gap by connecting governance requirements with the actual operation of AI systems.

Pre-deployment assessments are essential, but they provide a view of an AI system at a particular point in time.

Once deployed, the system may encounter new information, different circumstances, updated instructions or changes to the workflows in which it operates.

These changes can introduce risks that were not identified during the initial assessment.

Apex Audit supports the principle that governance should continue throughout an AI system's operational life, rather than ending once it has been approved for deployment.

Runtime governance means monitoring and evaluating AI systems while they are actively operating, rather than relying solely on assessments conducted before deployment or reviews performed afterwards.

For example, an organisation may have a policy restricting how AI handles confidential information or requiring human approval before certain actions are completed.

Runtime governance connects those requirements to the AI workflow, allowing relevant activities, potential exceptions and oversight requirements to be identified during operation.

Apex Audit is designed to make this an ongoing process rather than a separate, occasional exercise.

No. Compliance depends on an organisation's legal obligations, internal policies, operational practices and the decisions made by its responsible teams.

Apex Audit is designed to help organisations implement, monitor and evidence governance controls associated with their AI systems.

By maintaining visibility into AI activity, highlighting potential exceptions and recording oversight actions, Apex Audit can support organisations in demonstrating how their AI systems are governed.

It complements, rather than replaces, the organisation's responsibility for compliance.

AI is moving beyond individual productivity tools and becoming embedded in business processes, with AI agents increasingly capable of performing tasks and taking actions across systems.

As organisations expand their use of AI, traditional governance approaches can struggle to keep pace with the volume, complexity and changing behaviour of these systems.

The challenge is no longer only deciding whether an AI system is safe to deploy. It is also understanding how that system continues to operate once deployed.

Apex Audit is being developed to help organisations address this growing need for continuous visibility, oversight and accountability.

An AI workflow is a business process in which an AI system performs one or more activities.

For example, AI may review documents, extract information, prepare a report, recommend a decision or interact with another business system.

Some workflows involve human review and approval, while others may operate with greater autonomy.

Apex Audit focuses on the activities taking place within these workflows, the governance requirements that apply to them and the people responsible for their oversight.

Apex Audit is designed to minimise the need for manual reporting.

When connected to an organisation's AI systems and workflows, its intended approach is to capture relevant activity and governance information automatically during operation.

This reduces dependence on employees remembering to document every interaction or completing separate compliance forms.

Certain governance activities, such as reviewing exceptions, recording decisions or providing approvals, may still require human involvement.

No. Apex Audit is designed to support responsible AI adoption, not unnecessarily restrict it.

Organisations should be able to benefit from AI while understanding the risks associated with its use and maintaining appropriate oversight.

Apex Audit aims to provide the visibility, governance controls and accountability needed to support that balance.

Where an AI action falls outside an organisation's approved boundaries, intervention may be appropriate. However, the broader objective is to enable AI adoption with greater confidence and control.

The appropriate response depends on the nature of the activity, the risk involved and the organisation's governance policies.

For example, an exception might need to be recorded for later review, flagged to a responsible team, escalated for investigation or referred for human approval.

Apex Audit is designed to help governance teams identify these exceptions, understand their context, assign responsibility and maintain a record of the actions taken.

Not every exception requires the same response. The aim is to help organisations respond proportionately and consistently.

Organisations using AI often handle confidential client information, personal data, financial records and other sensitive material.

This creates governance challenges around which information AI systems should be permitted to access, process or share.

Apex Audit is designed to help organisations establish and monitor policies governing AI activity, including requirements associated with sensitive information.

By providing visibility into connected AI workflows and identifying relevant policy exceptions, Apex Audit aims to help governance teams detect and investigate potential information-handling risks.

Anonymising or redacting sensitive information can reduce risk, but it does not automatically make information safe to share.

Even after names and obvious identifiers have been removed, combinations of contextual details, financial figures, project information or other attributes may still reveal confidential information or allow individuals to be identified.

There are also broader questions about where information is processed, who can access it and what the AI system is permitted to do with it.

Effective AI governance therefore requires more than document anonymisation. It also requires controls around data access, permitted use, information handling and oversight.

Human oversight means ensuring that appropriate people can review, approve, challenge or intervene in AI-driven activities when required.

For example, an AI system may generate a recommendation that must be reviewed by an authorised employee before a decision is finalised.

Apex Audit is designed to help organisations identify where oversight is required, record relevant human decisions and maintain evidence of those interventions.

This helps make human oversight a demonstrable part of the governance process rather than simply a documented policy.

AI providers and application systems may produce technical logs showing requests, responses, errors and other system events.

These records can be useful, but they may not provide the full organisational context needed by governance, risk and compliance teams.

For example, a technical log may not explain which internal policy applied to an activity, whether a governance exception occurred, who was responsible or whether human approval was required.

Apex Audit is designed to connect AI activity with its governance context, helping organisations create a more complete record of how their AI systems are operated and overseen.

AI-related incidents can have consequences beyond technical failures or regulatory breaches. The mishandling of confidential information, inappropriate AI-generated decisions, unexpected agent behaviour or inadequate human oversight can undermine the trust of customers, partners, regulators and the public.

Apex Audit is designed to help organisations identify potentially harmful AI behaviour, monitor whether systems are operating within approved boundaries and maintain accountability for how incidents are addressed.

By providing visibility into AI operations and preserving evidence of governance actions, Apex Audit can help organisations investigate incidents, respond more effectively and demonstrate responsible oversight.

While no platform can eliminate reputational risk entirely, continuous AI governance can help organisations reduce preventable incidents and respond more transparently when problems occur.

AI regulation can expose organisations to significant financial penalties, depending on the jurisdiction, the nature of the infringement and the organisation's regulatory obligations.

Under Article 99 of the EU AI Act, certain infringements can result in fines of up to €15 million or 3% of total worldwide annual turnover for the preceding financial year, whichever is higher for undertakings other than SMEs subject to the relevant provisions.

More serious infringements involving prohibited AI practices can attract penalties of up to €35 million or 7% of total worldwide annual turnover for the preceding financial year, whichever is higher. For SMEs, including start-ups, the Article 99 caps use the lower of the applicable fixed amount or turnover percentage.

Beyond financial penalties, failures in AI governance can lead to regulatory scrutiny, operational disruption, legal disputes and reputational damage.

Apex Audit is designed to support organisations in reducing governance gaps by providing continuous visibility into AI activity, identifying potential policy violations, documenting oversight and maintaining evidence that can support regulatory enquiries and audits.

Apex Audit does not guarantee regulatory compliance or eliminate the possibility of fines.

Source: European Commission — EU AI Act, Article 99

Apex Audit is designed to support clearer accountability by connecting AI systems, workflows and governance activities with their responsible teams and individuals.

Different people may be responsible for developing an AI system, operating it, defining its governance requirements or reviewing its risks.

By making those responsibilities visible and associating exceptions with the appropriate owners, Apex Audit aims to help organisations coordinate governance across departments.

This is particularly important where AI activities involve several functions, such as Technology, Risk, Compliance, Legal and Business Operations.

Your team would have access to a centralised governance dashboard designed to provide visibility into AI activity across the organisation.

The intended experience covers three levels:

Organisation-wide visibility: Understand which AI systems and agents are operating, where they are being used and which areas may require governance attention.

Workflow-level visibility: Review individual AI workflows, their associated governance controls, potential risks, exceptions and oversight requirements.

Activity-level visibility: Examine specific AI activities, relevant policy checks, human interventions and the evidence recorded.

Governance teams would be able to investigate exceptions, assign responsibility, follow the status of issues and access records supporting internal reviews and audits.

The goal is to give your team one place to understand what AI is doing, whether it is operating within approved boundaries, what needs attention and how oversight has been exercised.