The App Suite: Open-Source AI Governance · Triodian

App suite · open source

One suite, configured for each use case.

Twenty-two seconds, silent: the app suite, and who each part is for

Configure it for the engagement you run, with one register throughout.

The Triodian app suite runs every Triodian engagement. Configure it for the use case in front of you: the obligations in scope, the board’s direction on AI, its risk appetite, an assessment of where AI acts, or confidentiality during a deal. Whichever you run, every decision, finding and question to counsel is recorded in one place with its source. The suite is available now and open source under Apache 2.0, free to self-host, with community support or a paid support agreement. Two of its apps serve any company; Risk Appetite and Use Assessment are for regulated entities, and Confidentiality Exposure is for companies outside prudential regulation. We will walk you through each one on a worked example.

Not legal advice. Triodian records positions and states what documents show. Whether anything meets a legal obligation, and what your duties require, are questions for your counsel.

Available nowOpen source · Apache 2.0

For counsel and general counsel

AI Obligations Atlas

Records

  • AI obligations by jurisdiction, each tagged binding, expected or anticipated
  • Ten standardised AI use cases
  • Provenance for every record, with a named approver

Produces

  • A matter brief, built in the browser
  • The questions counsel will need to determine
  • The same records by web app, REST API and MCP

Free to use at obligations-atlas.triodian.com. Australia and Singapore. No client facts leave the browser.

Available nowOpen source · Apache 2.0

For boards, board advisers and general counsel

AI Board Direction

Records

  • Ten steps, B0 to B9, in one workshop and one board meeting
  • Each position with who proposed it
  • A posture for each area of the business

Produces

  • An AI risk appetite statement, or directions the appetite must stay within
  • A board minute and a 90-day action list
  • An automated-decision worklist for counsel

Worked example: a fictional food manufacturer. Standalone for any company; connected for regulated entities.

Available nowOpen source · Apache 2.0

For boards and CROs

AI Risk Appetite

Records

  • The board's eight decisions, as its own positions
  • Ten checks across the decisions
  • No view on what the appetite should be

Produces

  • An AI risk appetite statement
  • A tolerance and trigger schedule
  • The calibration set the assessment reads

Worked example: a fictional insurer. Each engagement is held server-side, behind sign-in.

Available nowOpen source · Apache 2.0

For assessors, counsel and CROs

AI Use Assessment

Records

  • One register entry per place AI acts, including inside providers
  • The seven questions for each arrangement
  • One obtainability test per evidence rung
  • Legal questions routed to counsel in writing

Produces

  • A finding per arrangement
  • An independent check before hand-over
  • The hand-back list of gaps and owners

Worked example: a fictional insurer and its providers. Eight phases, each with a gate; anything made before its gate is met is marked draft.

Available nowOpen source · Apache 2.0

For counsel and deal teams

AI Confidentiality Exposure Assessment

Records

  • Seven channel kinds across the company's estate, its advisers' and personal devices
  • The five questions put to each channel
  • Indicative, required and obtainable rungs on the non-egress ladder

Produces

  • A finding per channel
  • A 90-day plan from what exists
  • The residual gap, marked, and a technical annex

Worked example: a fictional deal under a code name. Run through counsel under privilege; no deal content enters the register.

How the suite connects

The same board decision carries from the boardroom to the boundary.

For regulated entities, the appetite sets the operating points that controls enforce, so a finding names exactly which rung of evidence is missing and against which limit. For companies outside prudential regulation, Board Direction runs standalone and its confidentiality position feeds the AI Confidentiality Exposure Assessment.

01

Obligations

The Obligations Atlas sets out the sources in scope, and counsel decides what applies.

02

Direction

The board sets its direction on AI in the Board Direction app.

03

Appetite

For regulated entities, the board’s positions on authority, evidence and triggers, within that direction.

04

Assessment

The AI Use Assessment app tests each arrangement against that calibration.

05

Finding

Each gap is named, with the evidence rung it needs and its owner. You choose who fills it.

You hold your register

Your register and findings are yours. The suite is open source under Apache 2.0, so you can run it in your own environment.

Aggregate evidence only

No customer data, no deal content and no individual decisions enter the suite.

Drafts to counsel first

Legal questions are routed in writing, and findings are gated by a legal-line check and counsel review.

Open source, and open to help. Use the suite, review a step or a record, tell us privately that you use it, or fund its upkeep.

Support the project →

See them working

Book a walk-through of the app suite.

Thirty minutes on a worked example, so the decision rests on the method, not on a slide.

Book a demo →