# SureCloud - **Type:** Software product - **Website:** https://www.surecloud.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) An AI governance module in SureCloud's risk and compliance software, for recording AI use cases, classifying them under the EU AI Act and tracking AI incidents. ## SureCloud scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 4/5 The product page documents an AI incident-management workflow where every incident is recorded, tracked to resolution and closed, and links EU AI Act risk classification to the wider GRC evidence base, though it does not detail a dedicated regulator-facing export format. ### Qualifications of the people who do the work: 3/5 The vendor's own leadership page names a full C-suite (CEO Nick Rafferty, CFO/COO Charles Ryan, Chief Product Officer Matthew Davies and others) and displays ISO 27001 and Cyber Essentials badges, but no certificate registry number accompanies the badges for independent lookup. ### What it publishes about fees: 1/5 No pricing figures, ranges or tiers are published on the product or platform pages reviewed. ### Knowledge of your sector: 3/5 General GRC and EU AI Act framing applies across sectors; content references cyber-intensive organisations broadly rather than naming distinct vertical modules specific to the AI Governance product. ### Independence from what it sells: 2/5 ISO 27001 and Cyber Essentials are independently certified, but the AI Governance product's own headline efficacy statistics are self-reported marketing claims without a named independent auditor. ### Who carries the risk if the advice is wrong: 1/5 A dedicated service-levels page exists on the site but returned no accessible SLA content during review, and no liability cap or indemnification terms were found published elsewhere. ## Sources for SureCloud Every line carries the page it was read on and the date it was checked. - SureCloud Limited is registered with Companies House and shown as an active company. - Source: https://find-and-update.company-information.service.gov.uk/company/05703655 - Checked: 2026-07-17 - The AI Governance product provides an AI use-case and model register classified against the EU AI Act risk framework, risk assessment, AI incident management, and an AI assistant ('Gracie AI') offering compliance, privacy and regulator-style perspectives, integrated with SureCloud's wider GRC modules. - Source: https://www.surecloud.com/product/ai-governance - Checked: 2026-07-17 - No pricing figures are published on the AI Governance or platform pages reviewed; SureCloud's model is quote-based via sales contact rather than a public price list. - Source: https://www.surecloud.com/product/ai-governance - Checked: 2026-07-17 - SureCloud publicly discloses ISO 27001 and Cyber Essentials certification badges on its leadership/company page; no UK-government-specific AI engagement (e.g. AI Safety Institute, FCA sandbox, gov.uk AI Assurance directory) was found published. - Source: https://www.surecloud.com/company/leadership - Checked: 2026-07-17 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Not published - How it uses AI: Published ## Strengths - AI use-case register is explicitly mapped to the EU AI Act risk-classification framework, directly supporting the August 2026 enforcement deadlines - Nearly 20-year track record as a GRC platform vendor (founded 2006) with its own ISO 27001 and Cyber Essentials certification disclosed - AI Governance module is natively linked to SureCloud's existing vendor, control and risk GRC modules rather than sold as a standalone silo ## Things to check Each one carries the factual basis it rests on. - Headline performance metrics such as a 75% reduction in AI audit prep time and a 65% improvement in risk register maintenance are presented on the product page without a named methodology, sample size or independent verification. - Basis: surecloud.com/product/ai-governance lists these percentage figures as marketing statistics with no citation or methodology note. - No pricing figures, tiers or indicative costs are published anywhere on the reviewed pages; a quote is only available after contacting sales. - Basis: surecloud.com/product/ai-governance and related pages show no price list, only contact and demo call-to-actions. - Public reporting on SureCloud's CEO is inconsistent: 2023 press coverage named an incoming CEO different from the co-founder currently listed as CEO on the vendor's own leadership page. - Basis: Third-party press (Corporate Compliance Insights, IT Europa, 2023) reported Tom Obermaier as incoming CEO, while surecloud.com/company/leadership currently lists co-founder Nick Rafferty as CEO. ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.