New Zealand

Runtime authority for New Zealand sovereign AI.

When the Privacy Commissioner asks how personal information flowed through an automated decision, when RBNZ asks for the outsourcing control trail under BS11, when an agency must honour its Algorithm Charter commitments — KYE Protocol™ answers from a record sealed at the moment of action. Replayable from the publishing tenant's JWKS alone. No vendor dependency in the audit path.

Apply for a New Zealand pilotCoverage maps

New Zealand frameworks mapped to KYE™ ™

Per-requirement bijection — not a slide deck.

Privacy Act 2020

The Information Privacy Principles plus Part 6 notifiable breaches. IPP 5 security and IPP 10 use-limitation map to Authority Resolution™ + Purpose Permission™; the IPP 6 access entitlement is served by the DSAR Evidence agent + Replay-Proof™.

RBNZ BS11 — Outsourcing

The Reserve Bank's outsourcing policy for registered banks. The Authority Register + SPoF registry evidence control over outsourced functions, and the Edge Governance Safety Floor keeps basic banking functions within tolerance when a provider fails — the BS11 continuity posture.

Algorithm Charter for Aotearoa New Zealand

The government's algorithm commitments on transparency, human oversight and data/bias. The Decision Map™ records when an algorithm informed a significant decision, GovernedUI™ nominates accountable approvers, and the Data Classification Engine records the data provenance behind each decision.

Health NZ · FMA (acknowledged)

Health New Zealand clinical-AI obligations and Financial Markets Authority conduct guidance are acknowledged New Zealand regulators on the coverage registry; their per-requirement bijection maps are staged for the next coverage wave alongside the active three above.

New-Zealand-sovereign deployment

New Zealand data, New Zealand keys, New Zealand control.

  • Data residency — deploy to New-Zealand-region or Australasian edge runtime resources; per-tenant configurable; structured datastore + object store pinned to the chosen region.
  • Customer KMS — signing keys live in the customer's HSM or sovereign-cloud KMS; KYE™ never has access to the private key material.
  • Open verifier — the Office of the Privacy Commissioner, RBNZ examiners and the customer's own auditors can replay an Evidence Pack™ using only the publisher's JWKS. No vendor dependency in the audit path.
  • Apache 2.0 schemas + vocabulary — the contracts the customer relies on are open. The patent-track runtime construction is paid; the proof formats are not.

New Zealand pilot · 6 weeks

KYE™ New Zealand Readiness Pilot™.

New Zealand banks, government agencies, Health NZ and AI-deploying enterprises: a 6-week shadow-mode engagement producing Privacy Act 2020 IPP control mapping per assertion, Algorithm Charter coverage, signed Evidence Packs™ per decision, and a Privacy-Commissioner-ready executive summary with a residual-risk register.

Apply for a New Zealand pilot

Independent — no government affiliation. KYE Protocol™ is an independent protocol and is not affiliated with, endorsed by, or part of any government, regulator, or official “Sovereign AI” programme. References to regulators and frameworks describe the requirements KYE™ helps you evidence — not any official relationship.

Canonical KYE™ surfaces referenced on this page: Evidence Pack™ · KYE Protocol™ · Purpose Permission.