AI data governance for
regulated AU/NZ organisations
gate ships checksum-validated detection for every regulated identifier in Australia and New Zealand. The Compliance Pack adds the attestation, runbooks, and expert deployment that regulated organisations need to demonstrate due diligence to FMA, OAIC, and internal audit.
What's detected
Every AU/NZ identifier uses checksum or check-character validation — not just regex. This eliminates false positives on numeric strings that happen to match a pattern.
NZ IRD Number
Weighted modulus-11 checksum. Covers both 8- and 9-digit formats.
NZ NHI Number
Check-character validation for both legacy (alpha) and new (numeric) NHI formats.
AU Tax File Number (TFN)
Weighted checksum validation. Handles formatting variants (spaces/hyphens).
AU Business Number (ABN)
Weighted modulus-89 checksum. Rejects the majority of false positives at the validation layer.
AU Medicare Number
Luhn-adjacent check digit validation with optional IRN suffix support.
Standard PII (all regions)
Email, phone, full name heuristics, credit card (Luhn), passport patterns, dates of birth.
What the Compliance Pack adds
The open-source tool is free and contains all the detection logic. The Compliance Pack is for organisations that need to evidence their controls to a regulator, auditor, or board.
AI data-flow risk assessment
We map every path where AI agents touch personal information in your environment and classify risk by regulator (FMA, OAIC, Privacy Commissioner).
Deployment runbook
Environment-specific installation, configuration review, and forced-column mapping for your schema. Tested against your actual query patterns.
Signed certificate
GZhu Limited issues a signed attestation that gate is deployed and configured correctly for your environment. Suitable for audit evidence and regulator queries.
Ongoing monitoring
Quarterly review of patterns against regulatory updates, new AI tool integrations, and schema changes. Certificate remains current.
Who it's for
NZ financial services
FMA-regulated firms using AI agents with customer data — wealth management, banking, insurance.
AU regulated entities
APPs-bound organisations under OAIC oversight — financial services, health, telco.
Government agencies
Central and local government adopting AI tooling with access to citizen records.
Data-heavy tech companies
Product teams using AI coding tools (Claude Code, Copilot, Cursor) against production databases.
Start with a conversation
The assessment takes one session. If gate isn't the right fit for your environment, we'll tell you — the tool is open source and the first conversation is free.
Talk to us