• Auditor module

Enterprise AI governance for your entire engineering organisation.

Auditor is the enterprise add-on to Speedwave core — central fleet management, EU AI Act System Registry, 34 AI evaluation metrics, 139-event audit trail, and a compliance documentation pack your CISO can hand directly to the regulator.

Talk to us about Auditor → See Speedwave core →

• Five modules

Everything you need to govern AI at scale.

Auditor adds five capability modules on top of the Apache 2.0 Speedwave core. Each is independently useful; together they satisfy the full governance stack for BFSI.

SSO + RBAC

Fleet management

Microsoft Entra ID integration. 9 granular permission areas. Centralised policy enforcement across your entire engineering fleet without touching individual workstations.

AI Registry

EU AI Act compliance

Art. 51–52 registration, risk classification workflow, governance sign-off trail, ISO 42001 Clause 6 aligned. Feeds directly into your regulatory submission.

34 metrics

AI evaluation

DeepEval, RAGAS, Promptfoo. PII Leakage, Prompt Injection Guard, SQL Injection Guard, Faithfulness, Answer Relevancy. Continuous — not point-in-time.

139 events

Audit trail + SIEM

Kafka + Debezium CDC. OTLP/HTTP to Splunk, QRadar, Datadog, Grafana. ISO 27001 Annex A.8.15 aligned. Your SOC sees AI actions in real time.

32 docs

Compliance documentation

Three-phase pack: current state, gap analysis with severity classification, remediation roadmap. Covers EU AI Act, GDPR, DORA, ISO 27001, ISO 42001, KNF/EBA.

• Architecture

Auditor and Speedwave core. Two layers, one platform.

Speedwave core

APACHE 2.0 — FREE

✓Per-workstation container (Lima / WSL2 / nerdctl)

✓MCP tool gateway (two-tool model)

✓PII tokenisation (PESEL, IBAN, NIP...)

✓13-agent parallel code review

✓Full audit log (READ/WRITE/DELETE)

✓Direct workstation-to-Anthropic API

Auditor

COMMERCIAL ADD-ON

✓SSO + RBAC (Microsoft Entra ID, 9 permission areas)

✓AI System Registry (EU AI Act Art. 51–52)

✓34 AI evaluation metrics

✓139-event audit trail via Kafka + Debezium

✓SIEM integration (Splunk, QRadar, Datadog)

✓32 compliance documents across 3 phases

Speedwave core is Apache 2.0 — free, forever. Auditor is a commercial subscription layered on top. Your API keys and code never pass through Auditor or any Speednet infrastructure.

• In detail

Five modules in detail.

Each module is independently deployable. Auditor adds to what Speedwave already captures — no re-instrumentation, no agents to redeploy.

01 Fleet management & SSO

Single pane of glass across your entire AI-assisted engineering fleet. Microsoft Entra ID integration with 9 granular permission areas — control who can use which AI capabilities, at which data classification level. Central policy enforcement without touching individual workstations.

02 AI System Registry

EU AI Act Art. 51–52 requires organisations to register high-impact AI systems before deployment. Auditor's Registry captures the system description, risk classification, governance sign-off, and ongoing monitoring data. ISO 42001 Clause 6 aligned. The registry output feeds directly into your regulatory submission.

03 AI evaluation metrics

34 metrics across three frameworks: DeepEval, RAGAS, and Promptfoo. Covers PII Leakage Rate, Prompt Injection Guard, SQL Injection Guard, Faithfulness, Answer Relevancy, Context Recall, and 28 additional metrics. Continuous evaluation — not point-in-time audits.

04 Audit trail & SIEM

139 structured event categories, captured via Kafka + Debezium CDC. OTLP/HTTP push to Splunk, QRadar, Datadog, or Grafana. ISO 27001 Annex A.8.15 aligned. Every AI action in your fleet is visible to your SOC team in real time.

05 Compliance documentation pack

32 documents across three phases. Phase 1: current-state assessment. Phase 2: gap analysis with severity classification (Critical / High / Medium / Low). Phase 3: remediation roadmap with owner assignment. Covers EU AI Act, GDPR, DORA, ISO 27001, ISO 42001, KNF/EBA.

Ready to scale Speedwave to your entire organisation?

Book a call to scope Auditor for your fleet. We will map your current governance gaps, identify the applicable regulatory frameworks, and give you a concrete implementation plan.

Talk to us about Auditor → Or read about Speedwave core →