Oregula builds internal AI governance frameworks for Indian companies, so AI adoption happens on clear rules instead of ad hoc calls.
No employee may connect company data to an external AI tool that has not completed the approval checklist in Appendix C.
Approved tools are reviewed quarterly against data classification, vendor terms, and applicable regulatory obligations.
Requests for new tools are routed through the AI Governance Owner, with a decision within five working days.
Most Indian companies have teams running AI tools daily, with no internal document defining what's allowed, what's reviewed, and who owns the decision.
The DPDP Act 2023 sets obligations around how personal data is processed, and AI tools are one of the least controlled paths for data to leave a company. RBI has also flagged responsible AI use as a supervisory priority for regulated entities.
Security and vendor questionnaires increasingly include questions on AI usage and data handling. A company without a governance document has no good answer.
ChatGPT, Copilot, and a dozen embedded AI features are already inside most workflows, usually adopted by individual teams without any central review.
Writing a governance framework from scratch takes weeks a founder or team lead doesn't have, and getting it wrong is worse than not having one at all.
Every engagement starts from the same operational foundation: a governance document built around how your company actually uses AI, not a generic template.
Oregula works with businesses of every kind, not just regulated ones. If your team is using AI tools without a formal policy, this is for you.
Product and engineering teams already using AI coding and support tools daily, with prospects sending AI and data security questionnaires and no one internally owning the answer yet.
Direct exposure to RBI expectations on responsible AI use, customer financial data flowing through AI-assisted workflows, and a board asking for a documented position.
Editorial, marketing, and research teams using AI for writing and analysis, with unresolved questions on disclosure, accuracy checks, and client-facing use of AI-generated work.
Most engagements go from first call to a delivered framework within two to three weeks.
Your AI stack, data flows, team structure, and existing compliance obligations.
A first version of your governance document, written in language your team will read.
A working session to walk through gaps and edge cases, with changes made directly.
Final framework delivered, workshop scheduled if included, retainer set up if wanted.
Every company's AI stack, size, and risk profile is different, so pricing is scoped after a short call rather than fixed on this page.
Figures above are starting points, the exact quote depends on company size, number of AI tools in use, and depth of customisation required.
See what's included in each tier →Oregula is built by a team focused entirely on AI governance for Indian companies, combining hands-on experience with AI tools and workflows with a working understanding of the regulatory landscape, including the DPDP Act and RBI's expectations for AI use in regulated sectors.
Every framework is researched, drafted, and reviewed with the same rigour, whether you're an early-stage startup or a regulated financial institution. The result is operational guidance your team can act on immediately, not legal advice or a substitute for a qualified lawyer's opinion.
Meet the founder →Oregula is early-stage, this is a small practice with a growing client list. A couple of notes from recent conversations.
"We'd been putting this off for months. Having something concrete to work from, instead of starting from a blank page, made it easy to just get going."
FOUNDING TEAM, BENGALURU-BASED SAAS STARTUP
"Useful to have a real document to point to when our enterprise prospects ask about AI and data handling during security review."
COMPLIANCE LEAD, FINTECH COMPANY
Tell us about your AI stack and current data handling. We'll come back with a short read on your exposure, and pricing, based on your engagement.
Or connect on LinkedIn for a quicker first conversation.