Products
One spine. Four lines.
Every line runs on the same governed vault, the same two locks and the same evidence chain. That is the point of the spine: the governance is built once, and each line inherits it rather than rebuilding it.
01
Lead product
Neleus GRC
Governance, risk and compliance for European finance and technology.
Open
02
In design
Neleus Medical
One technical file that answers the MDR and the AI Act together.
Open
03
Under construction
Neleus Studio
A governed workspace for making things.
Open
04
Under construction
Neleus Personal
Private life on the same rails, walled off from the business.
Open
What every line inherits
The spine, in five parts.
01 / CAPTURE
Capture once. Reuse everywhere.
Five regimes run as five projects mean the same evidence written five
times. The requirements overlap. Neleus maps regulation to control in
one matrix, so a fact captured for the GDPR is already working for the
next framework. The GDPR is operationalised down to the article today.
The ISO 27001, NIS2, DORA and EU AI Act libraries are in build.
02 / ACCOUNTABILITY
AI does the work. A human stays accountable.
An agent can never be the accountable owner of a record. A foreign key
in the database schema forbids it, and a build check proves that
constraint still holds. Two locks govern every action: what the person
may do, and what the agent may do. Your admin configures both, per user
and per agent.
03 / EVIDENCE
Evidence that proves itself.
Changes are cryptographically chained to the one before them. Documents
freeze into immutable evidence, and files are re-verified against the
chain when they are served. If anything is altered after the fact, the
numbers stop adding up, and you can still show an auditor the original.
04 / SOVEREIGNTY
Sovereign by default.
Your data lives where you decide, and it is never used to train models.
European models are the default. Frontier models are optional, under
your own key. Voice control runs entirely on your machine. Data stays
local-first and yours, and the licence converts to open source over
time.
05 / MODULARITY
Governance leads. The rest follows.
Eighteen governed GRC domains in one connected vault: your structure,
your vocabulary, hierarchies up to seven layers deep, and typed
cross-links that carry meaning. A policy is implemented by controls, a
control compensates a risk, an incident affects a customer. Domains are
configured per organisation rather than hard-wired, so the same
governed rails carry whatever you run next.
06 / RUNTIME
How it actually runs.
The operator, the specialist roster, the openclaw runtime and the model
keys. Drawn out, with the parts that are built marked apart from the
parts that are designed.
Open the runtime page
Bring one real process.
Thirty minutes, one policy or process of your own, and we govern it live: the vault, the agents, the audit trail, and a refusal on demand.