AI Decoded

Proof,
not promises.

Most AI governance in Australia is built on policy documents and good intentions. We build the evidence that holds when a regulator asks.

MIT AI Risk Repository
1,612 risks
65 taxonomies · Primary risk classification engine
Privacy Act 1988 · APP obligations
APP 1.7
Clause-level mapping · s.13G · Up to $50M civil penalty
CSET AI Harm Taxonomy
Sector Risk
Confirmed AI harm incidents · Ranked by industry
AIID Incident Database
Live Data
Real-world AI incidents · Harm distribution mapped
Three ways we work — choose the door that is yours
Research Foundation
UTS DSI · PhD Research
Advisory & Products grounded in
MIT AI Risk Repository · 1,612 Risks
Evidence Standard
Defensible on the day a regulator asks
About AI Decoded
Built on research.
Grounded in evidence.
Designed for defence.

AI Decoded was founded by Sam B and Rae D — two practitioners who got tired of the same answer. Sam brings PhD research at UTS, the CausalShield institute, and four companies built and exited. Rae brings 18 years of strategic market intelligence across fintech and regulated industries, and built the operational framework that turns the MIT AI Risk Repository into evidence a board can actually use. The practice exists because most AI governance in Australia is built on opinion, vendor marketing, and frameworks that nobody has operationalised.

Every claim we make is anchored in independent research. Every product we build is grounded in four independent evidence bases — the MIT AI Risk Repository, the Privacy Act 1988 APP obligations, the CSET AI Harm Taxonomy, and the AIID Incident Database. Every advisory engagement produces documentation defensible on the day a regulator asks for it.

"The 2026 regulatory theme is proof, not promises — regulators expect auditable evidence that compliance controls work in practice, not just policies on a shelf."

LexisNexis · Legal Year in Review 2026

That is precisely what we produce. Our advisory engagements and Anchor platform generate the auditable evidence trail LexisNexis says regulators now expect — not another policy document.