What’s included
What’s included
AI threat modelling
Prompt injection, data exfiltration, tool abuse and model supply chain risks mapped to your architecture.

Built with


Why it matters
AI security questionnaires now gate deals.
A clear control story turns a blocker into a differentiator.
Prompt injection, data leakage and over-permissioned tools are new risk classes your existing controls were not designed for.
Regulators and auditors are catching up fast. Building the evidence trail now is far cheaper than retrofitting it.
What’s included · how it runs
Step 01
Threat model the AI workloads and review current controls and data flows.
What’s included
AI threat modelling
Prompt injection, data exfiltration, tool abuse and model supply chain risks mapped to your architecture.
Step 02
Implement guardrails, data protection and access boundaries.
What’s included
Data protection
Classification, redaction, retention, residency and private connectivity for model traffic.
Guardrails and controls
Bedrock Guardrails, input and output filtering, least-privilege tool access and human-in-the-loop where it matters.
Step 03
Wire up logging and produce the control documentation buyers and auditors ask for.
What’s included
Compliance evidence
Control mapping, logging and artefacts aligned to SOC 2, ISO 27001 and your customer questionnaires.
What you walk away with
Case studies
How Human eSources turned nearly three decades of talent science into AI that explains every job match, live on Amazon Bedrock behind TruTalent, its new recruiting platform.

Keith Gaudreau
VP Product Strategy
How NeuroMind modernised the loan management platform it runs for a major bank on AWS: secure by design, PCI-DSS aligned and quicker to release.
Read the case study[How the client got the outcome: what Assembly built and where it runs. One sentence.]
Talk to an engineerRelated beyond Gen AI