Iris (EYE-ris), by Garinym (gar-ee-neem)

Iris sees what your infrastructure and your AI actually do, and turns it into audit-ready evidence for the controls your auditors already require.

Cloud security tools see configurations. AI security tools see traffic. Neither sees what's actually happening inside the systems your business depends on. Iris monitors cloud and AI together at runtime, mapped to DORA's ICT risk-management and incident-reporting obligations, NIS2, GDPR, and the EU AI Act.

Who it's for

CISOs, DPOs, and AI engineering leaders at European enterprises navigating DORA's in-force ICT risk-management and incident-reporting requirements, alongside NIS2 and GDPR. The EU AI Act's obligations for high-risk systems under Annex III apply from 2 December 2027, following the AI Omnibus deferral that entered into force on 27 July 2026.