4 to 6 weeks · Fixed price
Private AI pilot
A deployment for one department, on your own hardware. Staff ask questions and get answers drawn from your own documents, with the source shown.
Singapore and Malaysia Maandoh is pronounced Ma-and-Oh
Private AI for regulated organisations
Maandoh deploys AI inside your own network, including air-gapped sites. Documents are processed on your hardware and are never sent to Maandoh or to third-party AI services.
We also supply expert-mapped regulatory reference material you can load offline, and test AI systems for security weaknesses.
Book a 30-minute call See our services
Built for banks, insurers, healthcare providers, professional firms and government-linked bodies in Singapore and Malaysia.
Document sets
- Policies
- Procedures
- Regulatory notices
Access
Compliance team
Which policy covers sharing customer data with a third party?
Third-party sharing is covered by the data handling standard. Disclosure needs documented approval from the data owner before any transfer.
Data handling standard, s4.2Vendor risk policy, s7.1
Ask a question about your documents
Illustrative interface. Document names and answers are examples.
Our four services
Gap report · Not an audit
AI governance readiness check
A report against frameworks such as MAS, BNM and NIST, showing where you stand and what to address first.
Findings report · Per engagement
AI security assessment
Adversarial testing of your AI systems for prompt injection, data leakage and unsafe outputs, with findings ranked by risk.
Delivered offline · Air-gapped sites
Regulation pack subscription
Updated, expert-mapped rules and guidance, delivered on media you control.
Card images are illustrative.
Latest writing
Plain notes for compliance, IT and risk teams
12 October 2026 · 5 minute read
What “air-gapped AI” actually means, and what it does not
Four deployment models compared, what changes when the network is closed, and six questions to ask any vendor.
29 September 2026 · 5 minute read
What an AI governance readiness check actually looks at
The difference between a readiness check and an audit, the areas a gap report covers, and what you do with it.
15 September 2026 · 4 minute read
Three things to check before staff ask AI about internal documents
Sources shown, access that follows permissions, and a record of what was asked. Plus a checklist you can copy.
Capabilities
AI that stays where your policies say it must
Answers drawn from your own documents
Staff ask a question in plain language and get an answer with the source section shown, so every answer can be checked.
Runs on your hardware
Inside your network, under your control.
Access controls
People see only what they are already permitted to see.
Works air-gapped
Installed, operated and updated without an internet connection.
Fixed scope and price
Deliverables and cost agreed in writing before any work starts.
Your boundary
Inside your boundary, by design
Documents, questions and answers stay on hardware you own. Nothing is sent to an external AI service, and the pilot can run with no internet connection at all.
The problem
Many teams are choosing between no AI and AI nobody can account for
Many regulated teams cannot send internal documents to an external AI service, and the rules for using AI are still changing.
Maandoh offers a third option: AI that runs inside your boundary, with the regulatory mapping to support your own review.
- No AINothing leaves, but nothing is gained.
- AI nobody can account forQuick to start, hard to explain to a regulator.
- AI inside your boundaryProcessing on your hardware, with a documented scope.
How it works
From first call to handover
- Talk
A 30-minute call about your environment and what you want to achieve. - Scope
One department, one document set and success criteria, agreed in writing with a fixed price. - Deploy
We install on your hardware, set access controls and test with your users. - Hand over
Documentation and a walkthrough so your team can run and review it.
Questions
Common questions
Does our data leave our network?
The pilot runs on hardware you own. Documents are processed there and are not sent to Maandoh or to third-party AI services.
Can it run in an air-gapped environment?
Yes. Installation, operation and updates can all be done without an internet connection. Updates arrive on media you control.
Who can see which documents?
Access controls decide who sees what. People see only what they are already permitted to see.
Is the readiness check an audit or a certification?
No. It is a gap report against frameworks such as MAS, BNM and NIST, to help you prioritise. It does not certify anything.
What do we need to provide?
One department, a named sponsor, access to the hardware, an IT contact and a defined set of documents.
Who runs Maandoh?
Maandoh was founded by James Ma. Read how each engagement is set up to reduce supplier dependency.
Talk to us
No obligation. We will ask about your environment and tell you plainly whether we can help.