Agents that must cite
Every output carries its source, the policy decision and a timestamp. No citation, no answer — that is what makes AI work reviewable by internal audit and supervisors in the first place.
Why now
This market has deadlines — and they are written into law.
Compliance budgets are not created by conviction, they are created by dates. The ones that matter to our customers run through 2028 — every single one carrying fines.
- since 17 Jan 2025DORA applies
Regulation (EU) 2022/2554 — ICT risk in finance, the 4h / 24h–72h / 1-month reporting chain
- since 2 Aug 2025EU AI Act — GPAI obligations
Regulation (EU) 2024/1689
- since 6 Dec 2025BSIG in force (German NIS2 transposition)
Directive (EU) 2022/2555 — fines up to EUR 10m or 2% of turnover
- 31 Jul 2026NIS2: BSI registration grace period ends
enforcement practice, not statute — flagged as such in our blueprints
- 2 Aug 2026EU AI Act — transparency duties (Art. 50)
fines up to EUR 15m or 3% of global turnover
- 31 Dec 2026BAIT is repealed
MaRisk (circular 06/2024) and DORA take over
- 10 Jul 2027AMLR applies
Regulation (EU) 2024/1624 — the new EU AML regime, including the AMLA authority
- 2 Dec 2027EU AI Act — high risk (Annex III)
after the Digital Omnibus deferral; Annex I from 08/2028
As of August 2026. The same deadlines and sources that sit behind our blueprints.
Product
Not a demo stack. A platform running in multi-tenant production.
Agentic360 is live: 25+ backend services, four frontends, tenant-isolated data — in German, English and Spanish throughout.
Blueprints, not checklists
A regulation becomes a documented target process cited to the article. Customers map their own processes against it and get a prioritised gap list.
Regulation watcher
Legal sources are monitored continuously. Changes arrive as a task in the system instead of a newsletter nobody reads.
Guardrails and hallucination checks
Policies are enforced at runtime, answers are verified against the source and blocked when coverage is too low — not annotated after the fact.
Sovereign deployment
SaaS in Germany, private cloud, on-premises, all the way to air-gapped. Local models instead of a forced move to a US cloud.
Fleet Control
Central management of distributed installations: signed heartbeats, update manifests, support bundles — including networks with no internet access.
Built to connect
An MCP gateway and A2A make the platform addressable by third-party AI clients; connectors to ERP, GRC, ticketing and e-signature services are in place.
Security as a product
Our own security and compliance scanner with deterministic grading — the same evidence logic we sell to customers audits the platform itself.
Business model
Recurring, tiered, channel-ready.
The entry point is small and driven by a regulatory date; the expansion path is already built into the product.
Subscription per tenant
Three tiers — Starter, Growth, Enterprise — with a growing scope of roles, policies and evidence.
Modules as the expansion path
Feature modules and plugins are enabled per tenant, from anti-money-laundering to the security scanner. Account growth without a new contracting cycle.
Deployment as a pricing dimension
Private cloud, on-premises and air-gapped are priced separately — and that is exactly where competition is thin.
Partner and white-label channel
Consultancies and system integrators run the platform under their own brand through the partner portal.
The blueprint opens the door
A map-and-gap project on one framework is the short path into an account — and it leads to the platform contract.
Differentiation
What separates us from yet another copilot.
The market is full of assistants. Almost none of them survive an audit — and that is where the budget sits.
Evidence before convenience
We do not optimise for fluent answers, we optimise for answers that survive a review. That is why audit and supervisory functions listen at all.
Regulation as a maintained data product
The blueprints are curated target processes grounded in primary sources. That work cannot be replaced by a better prompt.
Sovereignty is not a checkbox
Operated in Germany, local models, down to installations with no internet access — segments pure SaaS vendors structurally cannot serve.
Honesty as a sales argument
Where a source has not been verified line by line, the page says so. In this market that is an advantage, not a flaw.
Interdisciplinary by design
IT, law and data science in the same team — the combination pure tech teams keep failing on in compliance projects.
Where we stand
What you can hold us to.
Product
A multi-tenant platform with tenant portal, admin console and partner portal. Not a prototype — a running operation.
Regulatory coverage
Four blueprints live — AMLR, DORA, MaRisk/BAIT and NIS2 — with 50 process modules and 118 grounded controls between them.
Markets
Interface, content and blueprints available end to end in German, English and Spanish.
Operations
Partner and pilot environments in Europe and Asia-Pacific, including installations outside our own cloud.
Pipeline, revenue, usage and cohort figures are not published here — we share them in the data room, on request and under NDA.
Team & funding
Meet the team Five people, three disciplines, one funding programme.
Behind Agentic360 is an interdisciplinary team spanning IT, law and data science: leadership experience from the financial sector, legal expertise with an international profile, 25+ years of software engineering in security-critical environments and scientific advice on LLMs.
Development is supported by the “exist – from science to business” programme, funded by the German Federal Ministry for Economic Affairs and Energy and the European Union through the European Social Fund Plus (ESF Plus), based on a resolution of the German Bundestag. Implementation: Projektträger Jülich and the SRH Gründer-Institut of SRH University Heidelberg.
Next steps
Where the next funding goes.
The product exists. What needs to scale now is the path to the customer.
Sales in DACH, then the EU
Direct sales into regulated industries — finance, critical infrastructure, healthcare — alongside building out the partner channel.
Blueprint library
More frameworks using the same grounded method. Every new blueprint is a new reason for a first conversation.
Enterprise readiness
Certifications, hardening, and industrialising on-premises and air-gapped installations.
Team
Targeted hires in sales, customer delivery and AI engineering.
Contact
Let's talk numbers.
For investors we provide materials, metrics and a product walkthrough along a real framework. Tell us briefly what you are looking at — we will come back with data room access and a proposed date.
This page is a company presentation. It is neither an offer nor an invitation to subscribe for or purchase securities or shares, and it contains forward-looking statements that are not commitments.