Company
About Turrigan
Turrigan is an AI governance and assurance platform for production AI systems and AI agents. It sits inline between an AI system and the people or systems it affects. Every model output and every proposed agent tool call is submitted to one HTTP endpoint that returns allow, block, or escalate in milliseconds, screened by a deterministic core with no LLM in the hot path. Every decision is recorded as tamper-evident evidence mapped to the EU AI Act, NIST AI RMF and ISO/IEC 42001.
The company
- Brand and platform
- Turrigan
- Legal entity
- 8plus2 Omnitech OPC Private Limited
- Founded
- 2026
- Founder
- Ratish Kumar
- Headquarters
- Dombivali, Thane, Maharashtra, India
- Category
- AI governance, AI assurance, AI security
- Website
- turrigan.com
- Console
- app.turrigan.com
- Sales
- pilotturrigan.com
- Support
- supportturrigan.com
What Turrigan does
AI systems stopped only answering and started acting. Assistants file tickets, move money and message citizens. Agents call tools on their own. Each of those is a decision an organization owns, whether or not anyone saw it happen. At the same time the EU AI Act, NIST AI RMF and ISO/IEC 42001 all ask the same question: show how each decision was controlled.
Turrigan answers that question with a chokepoint rather than a dashboard. One HTTP call, POST
/v1/govern, is placed in the path an organization already controls, before an output reaches a user
or before an agent executes a tool call. A deterministic detector floor screens for leaked personal data,
fabricated citations, prompt injection, unsafe content, excessive agency and coverage gaps. Critical
findings block. Uncertainty escalates to a human. The floor fails closed rather than open. Every verdict
lands in an append-only, hash-chained log that is redacted, explainable and mapped to the exact control it
satisfies, so tampering is mathematically detectable.
The three products
- Turrigan is the platform: content governance, compliance and assurance, and agentic action governance across three planes. It is the thing that decides.
- Turrigan Guard is the browser extension for the input side. It checks a prompt on the user's own device the moment they press Send in ChatGPT, Claude, Gemini or Microsoft Copilot, and pauses it for review if it contains personal data. Personal edition is free and has no network permission at all. Enterprise adds a masked, minimised audit record in your own tenant.
- Turrigan API is the developer interface, with typed schemas for every response.
The platform governs what AI says and does. Guard governs what goes into it. Together they bracket the interaction.
Guardrails, governance, assurance
These three words are used interchangeably across this market, and they should not be. We use them precisely:
- Guardrails filter or constrain AI behaviour.
- Governance decides what behaviour is permitted in the first place, on a policy you own.
- Assurance proves afterwards what happened and why, in a form an auditor can verify.
Most tools in this market do the first. Turrigan does all three at one chokepoint: a deterministic guardrail floor, a governance decision that returns allow, block or escalate, and a tamper-evident evidence record behind every verdict.
Where Turrigan runs
Managed cloud on an isolated tenant, bring-your-own-database where the decision log lives in a datastore you host and own, or fully air-gapped on-premises with customer-managed keys and crypto-shredding. The deterministic core needs no external AI service in the decision path, which is what makes the air-gapped and sovereign deployments possible rather than aspirational.
What we deliberately do not claim
Turrigan does not make an organization compliant. No tool can. Compliance is an organizational outcome that depends on your own quality management system, risk process and governance. What Turrigan produces is the per-decision evidence and enforced controls that make a compliance case provable instead of aspirational, including a live conformity posture that reports which controls are covered, which are not, and which belong to you as the deployer.
Turrigan does not certify fairness. Disparate-impact screening surfaces signals worth investigating, at population level, and is honest about its limits.
The evidence infrastructure has passed an independent technical review against the EU AI Act, alongside adversarial reviews across the detector floor. Formal notified-body certification is a separate, later step, and we will not pretend otherwise. An assurance layer that inflates its own coverage is worse than none.
Turrigan elsewhere
- Turrigan on LinkedIn
- Ratish Kumar, founder, on LinkedIn
- Turrigan Guard on the Chrome Web Store
- Press and media kit, including approved company descriptions