Assurance you can put in front of a board
Eshalu is an AI governance assurance practice. We build one governed record per AI system — what it does, which controls apply, what evidence exists, what a reviewer decided, and what can safely be shared — and we say plainly where the evidence is missing.
Evidence over assertion
A policy document is not proof. Every conclusion we publish is traceable to an evidence item, a reviewer decision and the assessment version that produced it.
A person decides
Nothing becomes a finding without an authorised human. Automated analysis is bounded; the client sees the reviewer's conclusion, never the machine's.
What “independent” means
Your assessment is reviewed by an authorised Eshalu reviewer who sits outside the team that designs or operates the AI system. That is independence from the delivery line — not a statutory audit, and not certification.
Honest about limits
We report coverage and gaps. We do not certify compliance, we do not give legal advice, and we say so on every output rather than in the small print.
Who you will actually be working with
Raghuram Saripalli
Founder & Chief Executive, Eshalu
Eshalu was built around a single conviction: that the hard part of AI governance is not writing the policy, it is proving that the control behind it exists, that someone owns it, and that an independent person checked it. Most organisations can list their AI tools. Far fewer can show the evidence.
Raghuram founded Eshalu to close that gap with a governed record rather than a document — ten controls, an evidence trail with custody, and an authorised reviewer whose decision is the one the client sees. He leads the methodology, the reviewer standard and every client engagement personally.
- 23 years in enterprise systems, architecture and governance, including large-scale ERP and business transformation programmes.
- AI Law, Policy and Governance — certification, London School of Economics.
- PECB ISO/IEC 42001 Lead Implementer — currently completing.
The commitments behind the engagement
We start small deliberately
The first engagement is one AI system. It is contained, priced, and gives you a real deliverable before you decide whether to extend assurance further.
Scope is written down
Every engagement begins with a written scope and a fixed proposal: systems, evidence assumptions, reports, templates, workshops and review cycles. Nothing is described as unlimited.
You stay accountable
We support control design, documentation and evidence review. You approve your policies, assign your roles, operate your controls and obtain legal advice where required.
Your data is treated as the product
Client evidence is never used to train models, access is tenant- and workspace-scoped, and what was withheld from an external pack is recorded rather than silently dropped. Eshalu is ICO registered as a data controller, number ZC134750.