Services
The platform, and the engineers to put it to work.
RotaGrant is software you run. Getting it running in a regulated environment — wired to your identity provider, holding your keys, resolving the regimes you actually operate under — is work, and we would rather do it with you than write a runbook and wish you luck.
What we do
- Deployment
- Into your VPC, your data centre, or airgapped. Identity provider wiring over OIDC, key custody in your KMS or HSM, residency, egress posture, and the market profiles for the regimes you are under.
- First integrations
- Three lines in an agent's own code is the honest description of the SDK, and the first integration is still where the questions are — which actions are consequential, what a grant should bound, where the enforcement point belongs. We do that alongside your engineers rather than instead of them.
- Clause map authoring
- If your instrument is not among the ones we ship, a clause map is data. We will author one with your counsel: each clause, what evidence would satisfy it, and which clauses describe your process rather than the platform's behaviour. It lives in your repository and is scored by the same engine as ours.
- Rollout
- Getting from
observetoenforcewithout an incident. A week of observe produces a report of what enforcement would have refused over your own traffic — that report, not a demo, is the conversation to have internally. - Audit support
- When a supervisor asks. What the pack contains, what a signature is worth, what custody means, and what the platform cannot evidence.
Who turns up
Rotascale spent several years doing senior advisory work on AI in banking, insurance and government. Those are the people who wrote this product, and they are the people who deploy it. There is no delivery tier below the one that built it.
What we will not do
We will not run your AI programme, staff your model risk function, or take on an outcome we would then be marking our own homework on. A governance vendor that also owns delivery of the thing being governed has a conflict it cannot document its way out of — and the whole argument of this product is that the record should be checkable by somebody who trusts neither of us.