AI Governance & Assurance
Governance, guardrails and assurance for every kind of AI: machine learning, generative AI, LLMs, agents and automated decisioning, aligned to Australian guidance and international standards.
Explore AI governance →
Adelaide, South Australia · Est. 2018
AI governance, cloud and software engineering for South Australian organisations
EITSAA helps organisations govern and assure every kind of AI, and designs, builds and runs modern applications, AI agents and cloud platforms. We are local, accountable, and ready for business and government tenders.
Adelaide ownedRegistered ABN 35 921 253 844Operating since 2018Tender-ready documentationAustralian data residency
What we do
Capabilities built for the AI era
One team that covers strategy, engineering and ongoing operations, so your project moves from idea to production without hand-off gaps.
Training & Team Consultations
Workshops, teaching sessions and expert consultations that lift your team's skills in AI, software engineering, cloud, data and security, tailored to your own tools and use cases.
Explore training →Application Development
Custom web, mobile and cloud-native applications built for Adelaide businesses and government agencies.
Explore Application services →AI Consulting & Strategy
Practical AI strategy, readiness assessments and responsible AI governance aligned to Australian guidance.
Explore AI services →AI Agents & Chatbots
Custom AI assistants and agents for customer service, internal knowledge and process automation.
Meet the Mini Bot →LLM Applications & RAG
Production-grade large language model applications with retrieval-augmented generation, evaluation and security.
Explore LLM services →Intelligent Automation
Business process automation that combines workflow, RPA and AI to remove manual work for agencies and SMEs.
Explore Intelligent services →DevOps & Cloud Engineering
AWS, Azure and Google Cloud architecture, CI/CD, infrastructure as code and secure cloud migration.
Explore DevOps services →Website Design & Development
Fast, accessible, SEO-friendly websites for small businesses, not-for-profits and agencies.
Explore Website services →Data & Analytics
Data platforms, dashboards and automation that turn operational data into decisions.
Explore Data services →Managed IT & Cyber Security
Ongoing application support, cloud operations and Essential Eight uplift for small organisations.
Explore Managed services →Flagship capability
AI governance and assurance for every kind of AI
Machine learning, scoring models, generative AI, LLMs, retrieval assistants, AI agents and automated decisioning each fail in different ways. We build the governance, guardrails and evidence that let your leaders, auditors and customers rely on all of them, aligned to the Guidance for AI Adoption, the Voluntary AI Safety Standard, ISO/IEC 42001, NIST AI RMF and the OWASP Top 10 for LLM Applications.
- Inventory and risk tiers. Know every AI system and how much review it needs.
- Guardrails. Filtering, injection defence, PII redaction, grounding, tool permissions and limits.
- Failure-mode analysis. Hallucination, drift, leakage, tool misuse and outage, each with a mitigation.
- Model risk management. Validation, fairness, explainability and monitoring for scoring and decisioning.
- Evidence. Audit-ready packs and red-team results your buyers can verify.
· 3 min read
The Voluntary AI Safety Standard's 10 guardrails explained for SA organisations
The ten VAISS guardrails in plain English, how they map to the six practices in the Guidance for AI Adoption, and what SA organisations should do first.
· 2 min read
AI governance framework in practice: inventory, risk tiering and approvals
How to build a working AI governance framework: an AI register, risk tiers, RACI, an approval board and evidence that scales with risk.
· 3 min read
Types of AI and their different risks: ML, generative AI, LLMs, agents and automated decisioning
Compare machine learning, scoring models, generative AI, LLMs, RAG, AI agents, computer vision and automated decisioning, with the risks and controls for each.
Training & Team Consultations
Lift your whole team's skills
Workshops, teaching sessions and expert consultations tailored to your tools and use cases: AI fundamentals, safe Copilot use, building LLM apps and agents, AI governance for leaders, software engineering, cloud, data and cyber security. On-site in Adelaide or online.
- AI use-case discovery workshops
- Prompt engineering and safe generative AI use
- Executive and board briefings on responsible AI
- Engineering, DevOps and secure coding clinics
- Hands-on labs and ongoing coaching
Why EITSAA
A local partner you can hold to account
- Adelaide-based. We meet face to face and support South Australian jobs and industry participation.
- Security first. We design to ACSC Essential Eight principles and keep data in Australian regions where required.
- Responsible AI. Our AI work aligns with Australia's AI Ethics Principles and the Voluntary AI Safety Standard.
- Vendor neutral. We work across AWS, Azure and open-source tools and recommend what fits, not what pays commission.
- Accessible by default. We build to WCAG 2.2 AA, which government and inclusive businesses need.
Who we help
Built for SMEs, not-for-profits and government
State & local government
Digital services, AI pilots, automation, accessibility uplift and cloud modernisation, delivered under clear procurement and security requirements.
Government capability →Small & medium businesses
Automation, customer-facing apps and AI assistants that free up your team to focus on growth.
See services →Not-for-profits & health
Affordable, secure platforms and websites that serve every community member, including people using assistive technology.
Talk to us →How we work
From discovery to dependable operations
Discover
Workshops to define outcomes, risks and success measures.
Design
Architecture, UX and security designed up front.
Deliver
Agile sprints with working software every fortnight.
Operate
Monitoring, support and continuous improvement.
Learn
57 reference architectures
Reference architectures for cloud, CRM and integration platforms, with design decisions, security controls and failure modes. They are reference models, not client systems.
9 architectures
AI governance and assurance
Operating models, guardrails, agent safety, model risk management, automated decisioning, evaluation and red-teaming, observability and data governance for every type of AI.
9 architectures
Cloud platforms
AWS and Azure foundations, delivery pipelines, data and AI platforms, resilience and operations.
12 architectures
AI, LLM and real-time
RAG, agents and LLM platforms on AWS, Azure and Google Cloud, plus WebRTC video and voice for mobile apps.
8 architectures
CRM and business systems
Salesforce, Dynamics 365, HubSpot, Zendesk, ServiceNow, Xero and MYOB, connected safely to the rest of the business.
5 architectures
Integration and multi-application
How several applications, channels and partners share data without becoming one fragile knot.
5 architectures
Risk, resilience and compliance
CPS 230 operational resilience, provider exit, compliance evidence, regulator reporting and secure third-party boundaries for regulated entities and their suppliers.
9 architectures
Industry patterns
Sector shapes for government, councils, health, education, care, retail and field services, built on real cloud services.
Risk, resilience and compliance
Operational resilience for regulated entities and their suppliers
APRA CPS 230 has been in force since 1 July 2025. We help you design and evidence the technology behind critical operations, service provider management, resilience testing and incident reporting, alongside CPS 234, SOCI, ISO/IEC 27001 and the Essential Eight. General guidance, not legal advice.
· 6 min read
Privacy Act and Notifiable Data Breaches for SA organisations: what ICT leaders need to do
Practical guide for SA agencies, councils, NFPs and SMEs on APPs, NDB assessment clocks, and how privacy fits with CPS 230/234, SOCI and Essential Eight.
· 7 min read
APRA CPS 230 explained for ICT leaders: critical operations, tolerance levels and service providers
What APRA CPS 230 means for ICT leaders: critical operations, tolerance levels, continuity testing, material service providers and notification timeframes.
· 4 min read
Mapping CPS 230 to cloud architecture and resilience testing on AWS and Azure
How to turn CPS 230 tolerance levels into AWS and Azure designs and a testing program: zones, regions, backups, game days and recorded evidence.
Insights
Practical guidance for SA buyers and builders
Plain-English notes on government ICT procurement, AI adoption and cloud delivery for South Australian organisations.
· 10 min read
Cloud cost control for SA councils and small businesses: a practical FinOps guide
How SA councils, agencies and small businesses avoid cloud bill surprises: tagging, budgets and alerts, safe savings, commitments, AI caps and a 90-day plan.
· 10 min read
Software testing and UAT for SA Government and council projects: a practical guide
How SA agencies, councils and small businesses plan software testing and UAT: test layers, safe test data, accessibility, security and a 90-day plan.
· 9 min read
Email security for SA councils and small businesses: SPF, DKIM, DMARC and stopping fake invoices
How SA councils and small businesses stop spoofed email and fake invoice scams: SPF, DKIM and DMARC in plain words, a safe path to reject and a 90-day plan.
Let’s talk about your next project
Talk to an Adelaide-based team. We reply within one business day.