The standards we keep when nobody is auditing.

Three Decembers at a Block Resource Centre in Tripunithura. School bags for a school up the road in Perumbavoor. And an AI lifecycle where a named human signs the decision before anything ships. None of it is a campaign. It is a short list of specific things, done on specific dates, by people who work here.

See the record →Responsible AI →
3 Decembers2023 – 20259 phases, 8 gatesISO 27001 certified
The recordWhat, and when
Focaloid colleagues standing together under a balloon arch, December 20232023 → 2025Three years at the same centreOne of the sponsors of the World Disability Day celebrations at the Block Resource Centre, Tripunithura
Two red and black backpacks printed with the Focaloid Technologies wordmarkFeb 2025School bags, PerumbavoorSponsored for students of Salem V.H.S.S., West Vengola
2026Alongside a student in treatmentPart of the treatment costs of an engineering student who fell seriously ill
Every AI buildA human signs the gateEight documented go/no-go decisions before an AI system ships
ISO/IEC 27001:2022 certified · TÜV Rheinland
What this page is

In the room, and in the system.

Responsibility is easy to write and hard to evidence, so this page only carries things that can be checked - a date, a photograph, a certificate number, a gate somebody had to sign. Two of them, in that order.

In the room

The town the company grew up in

A state education centre in Tripunithura, a school in Perumbavoor, and a student whose treatment costs we helped meet. Everything on this page happened within an hour of the Kochi floor, and most of it happened more than once.

See the record →In the system

AI a stranger could audit

Nine phases, eight documented go/no-go gates, one named person accountable at each - and a human approval step in front of anything an agent cannot undo. Governance as a build step, not a policy PDF.

How we govern it →
In the room · 2023 – 2025

Three Decembers at the same Block Resource Centre

For three years running - 2023, 2024 and 2025 - Focaloid has been among the sponsors of the World Disability Day celebrations organised by the Block Resource Centre, Tripunithura, under Samagra Shiksha Kerala. A Block Resource Centre is the state’s block-level education body, and the level at which resource teachers for children with disabilities are actually posted. Our part is a plain one: the community lunch served to the children and their families. In 2023 and 2025 the celebration ran under the name Ability Fest.

December 2023 · first year

A month, not an afternoon

The banner sets its own dates on its face: 3 December 2023 to 3 January 2024. It is the first of the three, and the first time Focaloid’s name appears on one of them.

3 Dec 2023 – 3 Jan 2024. A month-long window around the International Day of Persons with Disabilities - the banner calls it ലോക ഭിന്നശേഷി മാസാചരണം, World Disability Month observance.
We have never been the whole of the funding. Count the marks along the bottom of the banner yourself - it is reproduced whole rather than cropped, which is the point of showing it at all.
What our money actually bought. Not the stage, the banner or the hall. The food.
The 2023 Ability Fest banner in Malayalam for Samagra Shiksha Kerala, B.R.C. Tripunithura, running 3 December 2023 to 3 January 2024, with the Focaloid Technologies logo in the sponsor row
December 2024 · second year

The year it became a habit

This banner is for the day itself - ലോക ഭിന്നശേഷി ദിനാഘോഷം, the World Disability Day celebration. Same organiser, same block, same building. One year is a donation; two is a decision.

The banner itself carries no year. This one is dated 2024 from our own records, not from the board - and it is not branded “Ability Fest”, unlike 2023 and 2025. We would rather say that than quietly round it up.
Six sponsor marks on this one. Focaloid is the leftmost of them, which is a layout decision by the organiser and not a tier. The day is funded by a handful of sponsors and we have never been the whole of it.
The lunch is the contribution. Food for the children and the family members who came with them - the part of a day out that quietly decides who can attend one.
The 2024 World Disability Day celebration banner in Malayalam for Samagra Shiksha Kerala, B.R.C. Tripunithura, with the Focaloid Technologies logo first in the sponsor row
December 2025 · third year

Pragathi 2025

By the third year the fest has a name of its own on the banner - പ്രഗതി, Pragathi, meaning progress - with “Ability Fest” set underneath it in English and 3 December on the face. The 2023 banner carries our old wordmark and this one carries the current mark, which is a plainer measure of the gap than any sentence we could write.

3 December 2025. The International Day of Persons with Disabilities, observed since UN General Assembly resolution 47/3 in 1992.
A day with a programme on it. The 2025 banner lists the day’s events in a coloured strip along the bottom - performances, a film show, an outing. Our line item is still the lunch.
Three consecutive years. 2023 and 2025 are dated on their own banners; 2024 is dated from our records, and the 2024 panel says so. All three banners are reproduced on this page.
The Pragathi 2025 Ability Fest banner for B.R.C. Tripunithura, dated 3 December, World Disability Day, with the current Focaloid logo among the sponsors
Around a dozen Focaloid colleagues standing together under yellow and black balloons outside a decorated building
Team Focaloid · December 2023
Focaloid colleagues seated among the audience in a large hall, waiting for the programme to begin
Colleagues in the audience
A group of students performing on stage in front of the Ability Fest banner
On stage, in front of the fest banner
Children and adults seated at long tables being served a meal on banana leaves
Lunch on banana leaves - the part we pay for. Venue not shown
A large stack of individually packaged red and black Focaloid backpacks piled on the red carpet of a school hall
February 2025 · Perumbavoor

A stack of school bags, and a morning in a hall up the road

Focaloid sponsored school bags for students of Salem V.H.S.S., West Vengola - a state vocational higher secondary school in Perumbavoor, Ernakulam district, about thirty kilometres from our Kochi floor. They were handed over in the school’s own hall, to the school’s own staff.

Feb 2025Salem V.H.S.S. · West VengolaPerumbavoor · Ernakulam district
In the room · a separate thing entirely

The unglamorous end of the supply list

A school bag is not a scholarship. It is the thing a family buys in the same month as the uniform, the books and the bus pass, and it is the one item on that list a company can simply take care of.

This has nothing to do with the Block Resource Centre above. Salem V.H.S.S. is an ordinary state vocational higher secondary school, its students are ordinary students, and the two pieces of work are only next to each other on this page because both are local and both are small.

Salem V.H.S.S., West Vengola. Listed by the Ernakulam district administration at West Vengola P.O., Perumbavoor 683556, and by Kerala’s Directorate of General Education in its vocational higher secondary admission prospectus.
February 2025, from our own record. The photographs put it in 2025 - a 2025 wall calendar is visible in the original of the first frame, though not in the crop shown here - but they do not put it in a month.
Branded, and we will own that. The bags carry the Focaloid wordmark. That is not pure altruism - it is a company logo on a student’s schoolbag - and the honest defence of it is only that it makes the bags in these photographs checkably the bags we paid for.
Feb2025
One school, one delivery, one morningNot a programme, not a partnership, not a pipeline. A single thing, done once, written down here because it happened. There is no bag count on this page because nobody wrote one down.
Nine men standing behind a table in a school hall, with a large stack of packaged red and black backpacks on the floor in front of them
The handover party
Two red and black backpacks printed with the Focaloid Technologies wordmark, standing on a desk
The bag itself
A Focaloid colleague handing a backpack across a table to a member of the school staff
The handover
Seven men standing together in the school hall after the handover
Afterwards
2026

The one we would rather not have had to do

In 2026, Focaloid met part of the treatment costs of an engineering student who had become seriously ill.

One less thing for a family to think about in a hard year. The rest of the story is theirs to tell, and we hope it is a long and ordinary one.

In the system

The same instinct, applied to software that makes decisions

Sponsoring a lunch is easy to be honest about. An AI system is harder: it can be wrong quietly, at scale, in a way nobody notices for a quarter. So the AI we build runs through the Governed-AI Lifecycle - nine phases with eight documented go/no-go gates, a named person accountable at each one, and an artefact at the end of every phase that a client’s risk team can read. Focaloid’s own summary of it is blunter than ours: “Most firms bring principles. We bring a lifecycle.”

Map · phases 1–3Decide what could go wrong before anyone writes a prompt

The use case is registered, risk-tiered and matched to its obligations, every dataset and retrieval source is accounted for, and the architecture is made governable on paper. Most AI risk is decided here, cheaply, by saying not like that early.

Measure · phases 4–5Build it, then try to break it

Quality, groundedness and robustness scored against a bar that was written down first - then adversarial and red-team evaluation against the OWASP LLM Top 10, which is exactly the class of failure a functional test cannot reach.

Manage · phases 6–9Sign-off, a reversible release, then watch it

It ships only when someone outside the build says so. It goes out behind runtime guardrails, with a rollback path that has actually been tested, and then runs under live evals for drift, cost and abuse until the day it is retired.

Govern · all nineOne name against every decision

An AI inventory, a RACI where one person is Accountable rather than a committee, the go/no-go gates, and an evidence pack per phase. Phase 9 feeds its findings straight back into phase 1 - it is a loop, not a launch checklist.

Eight places where a person has to say yes

A gate is a short, documented decision, not a committee - and a “no” at gate one is the cheapest risk decision anyone will ever make. Gates are cheap. Drift is expensive.

Gate 01build, or not?Is this use case worth building - at this risk tier, with these obligations?
Gate 02data clearedIs every dataset and retrieval source accounted for, with provenance and a lawful basis?
Gate 03design reviewIs the architecture governable by construction - guardrails, least privilege, human-oversight points?
Gate 04post-build readinessIs it instrumented - tracing, prompt versioning, guardrails - and ready to be tested?
Gate 05meets the barDoes it clear the quality bar and survive deliberate attack, with evidence?
Gate 06go-liveFit to ship, on the record, with an evidence pack behind the signature.
Gate 07release verificationLive behind guardrails and access control, rolled out so you can pause or reverse it.
Gate 08monitoring reviewObserved continuously for quality, drift, cost and abuse, with a human-feedback loop.

The independence rule. Gate six is reviewed by people who did not build the system. Sign-off by the builder is not sign-off - it is a signature on your own homework.

Four ways an AI system actually hurts someone

None of these are hypothetical, and none of them are caught by a demo going well. Each one is caught at a specific phase, by a specific control, that leaves a specific artefact behind.

The failureThe runaway agentAn agent with refund access wrongly issues 500 refunds overnight. The code compiled fine - the unchecked authority was the problem.
Caught at phase 3 · designA human approval step on anything irreversibleA tool-permission matrix scoping exactly what the agent may do, plus a hard human interrupt before any action that cannot be undone. Evidence: the architecture decision record and the permission matrix.
The failurePrompt injection and leakageUntrusted input hijacks the model or exfiltrates data - the OWASP LLM Top 10 threats a functional test never sees.
Caught at phase 5 · red teamGuardrails proven under attack, not assertedInput and output guardrails set in design, then broken on purpose before the release gate. Evidence: the red-team report and the adversarial eval results the gate relies on.
The failureSilent quality driftA system accurate at launch quietly degrades in production. Without monitoring, nobody notices until a customer does.
Caught at phase 8 · monitorLive evals against the launch barSampled online evaluation, drift and abuse alerts, and a trace on every interaction - because traces, not code, are the only record of what an agent did and why.
The failureUnaccounted dataPersonal data indexed into a retrieval corpus with no lawful basis and no provenance. Ungoverned data makes everything downstream ungovernable.
Caught at phase 2 · dataNothing is indexed without a recorded basisA data inventory with provenance, personal-data detection and redaction, and a documented lawful basis before anything is indexed. Evidence: the data-lineage record and, where personal data is involved, the DPIA.

Each phase ends in a signable Evidence Pack, every system is carried in a Living Register with its risk tier and review dates, and everything - artefacts, gate decisions, eval runs, traces - hangs off one AI System ID. The method is mapped to the EU AI Act, the NIST AI RMF and ISO/IEC 42001, so the evidence is produced once. The information-security certificate underneath it, ISO/IEC 27001:2022, is verifiable on TÜV Rheinland’s Certipedia without asking us for anything.

The full nine-phase lifecycle →Trust & security posture →
Checkable

Six things, each with something behind it

Each one can be checked against a document - a banner reproduced further up this page, our own dated record where the banner is silent, Focaloid’s published governance framework, or a certificate on a third-party register.

3
Years running at Tripunithura - 2023, 2024, 2025
9
Phases every AI system we build runs through
8
Gates - a named human decision between phases
3
Frameworks one body of evidence answers to
ISO27001
Certified, TÜV Rheinland - check it yourself
13+
Years of it - incorporated in Kochi, January 2013
Zero figures on this page nobody countedZero beneficiaries namedOne certificate you can check yourself
Straight answers

The questions a procurement team actually asks

Including the one where the answer is a flat no.

How do you decide what to support?

Three rough tests, and we are describing what has happened rather than quoting a rule that was written down first. Proximity - everything on this page is within about an hour of the Kochi office, and somebody who works here knows the people involved. Repeatability - a thing we can do again next year beats a bigger thing we can do once. The unglamorous end - the lunch, the bag, the bill. The parts of a good idea that nobody wants to fund.

If you are looking for a partner on something that fits those, the address is at the bottom of this page.

Is your “responsible AI” section just the governance service in different words?

It is the same framework, and it should be. Focaloid sells AI governance as a service, which means the honest test of whether we believe in it is whether we run our own builds through it - the nine phases, the eight gates, the independent sign-off at gate six, the evidence pack per phase. We do, and that is the whole claim being made here.

The detail lives on the governance page, and the security posture underneath it - certification, data handling, subprocessors - is on Trust & Security.

Are you certified to ISO/IEC 42001, or do you hold an ESG rating?

No, to both. Our governance method is mapped to ISO/IEC 42001 alongside the EU AI Act and the NIST AI RMF, and we offer 42001 readiness work - but mapped is not certified, and we are not going to blur the two. The only certification Focaloid holds is ISO/IEC 27001:2022, for information security, issued by TÜV Rheinland and verifiable on Certipedia.

We hold no ESG rating and have not been assessed by EcoVadis, CDP or any equivalent.

Can we see the evidence behind a specific AI system you built?

For your own systems, yes - the evidence pack, the living register entry and the gate history are deliverables, not a portal you rent. For other clients’ systems, no, and you would not want us to be the kind of supplier who would.

Redacted sample templates go out on request from connect@focaloid.com.

Why is there so little detail about the student you supported in 2026?

Because more detail would identify them. Their year of study, their branch and their class section are all in our internal record, and any two of those together would narrow it to a handful of people at one college - alongside a medical diagnosis they never agreed to publish.

So the entry says what we did and stops. It is the only item on this page with no photograph, and that is not an oversight.

Who is in the photographs, and did they agree to be?

Colleagues took them on their own phones - at events run by the Block Resource Centre, at Salem V.H.S.S., and, in the case of the bag close-up, at our own desk before the delivery. Every caption describes what the frame actually shows; where we cannot place a photograph at a particular event or date, we say so rather than implying it.

If you appear in one of these images and would rather not, write to connect@focaloid.com and it comes down. No explanation needed.

Get in touch

If you run something near us, we would rather hear it early

A school, a resource centre, a hospital ward, a client whose AI review has stalled and needs the evidence rather than the assurance. None of this started as a proposal. Every item on this page started with somebody here mentioning it.

Write to connect@focaloid.com →See the governance method →

Kochi · Bengaluru · New York · ISO/IEC 27001:2022 certified

Keep going

The rest of the story

Where the company came from, who leads it, how it runs the work, how it secures it - and what it is actually like inside the room.

About UsFrom product engineering in 2013 to an AI-first partner - and the values we partner against.Read the story →Leadership & TeamThe founders and the extended leadership behind every CXO conversation.Meet them →How We WorkEngagement models, delivery rhythm and the gates that keep speed honest.See the model →Trust & SecurityISO 27001, data handling, AI governance - the posture behind the promise.See the posture →Life at FocaloidHow we hire, how we grow people, and what a Tuesday here actually looks like.Come and see →