Marc Larouche

Platforms

14 platforms, three research themes.

Each platform is local-first: your data stays on your machine, with encryption, role-based access, and a person reviewing anything an AI model produces. Status labels show where each one stands today.

Theme 01

Operationalizing governance controls

Security and AI governance frameworks are only useful if an organization can act on them. The Enclave suite turns NIST, CMMC, and AI governance requirements into local-first working tools: assess, document, evidence, and report, with a person reviewing the result.

Enclave-AI

In development

AI governance workspace

AI system inventory, control mapping, gap analysis, evidence vault, and a Policy Studio. Covers the NIST AI RMF, NIST CSF 2.0, ISO/IEC 42001, the EU AI Act, and U.S. state AI laws.

Tauri 2 · Rust · React · SQLCipher

Enclave-SSP

In development

System Security Plans for CMMC Level 2

Control narratives, three-tier evidence, POA&M tracking, and CUI marking, exported as a Word SSP and a full audit package.

Tauri 2 · Rust · React · SQLCipher

Enclave-GAP

In development

Explainable policy gap analysis

Scores written security policies against NIST SP 800-171 Rev 2 and Rev 3 with a rule-based engine, so every score traces back to the terms found or missing.

Tauri 2 · Rust · React

Enclave-POL

In development

Policy drafting with a local model

Generates control-by-control policy documents with a local Ollama model, flags controls for closer review, and records a human-review acknowledgment before anything leaves the app.

Tauri 2 · Rust · React · Ollama

Enclave-Vault

Planned

Traceability for AI evidence

A multi-user server for AI inventory, versions, approvals, evaluations, and tamper-evident evidence, with separated roles so no one person can approve and audit the same record. Requirements are accepted; the build is in early phases.

Rust · SQLCipher

Theme 02

Comparative regulation across jurisdictions

AI and data-protection law differs by country. These three desktop applications give consultants a per-client, encrypted workspace for the rules that apply in Panama, Portugal and the EU, and Canada.

Ley81-Suite

In development

Panama AI and data-protection compliance

Ley 81, Executive Decree 285, Ley 478, AIG 07, GDPR, the EU AI Act, ISO/IEC 42001 and 27001, NIST CSF 2.0, and COBIT 2019, in Spanish and English.

Tauri 2 · Rust · React · SQLCipher

TerraGuard-PT

In development

Portugal and EU compliance

Per-client encrypted vaults, an EU AI Act triage for prohibited and Annex III systems, a record of processing, and a signed self-assessment certificate. Covers GDPR and Decree-Law 125/2025, in English and Portuguese.

Tauri 2 · Rust · React · SQLCipher

Borealis-Compliance

In development

Canadian CPCSC Level 1 self-assessment

A guided self-assessment and gap tracker for Canadian small and medium businesses, producing an attestation for bid submissions. Version 0.1.0; the planned scope is not all working yet.

Tauri 2 · Rust · React · SQLCipher

Theme 03

Documentation quality and technical communication

Governance lives in documents: policies, release notes, interface text, and research. These platforms apply deterministic checks and source-grounded, human-reviewed drafting to technical writing, running locally so sensitive material stays on the machine.

Docentriq

In development

Private document engineering platform

A local-first workspace for building documents with a local model, with workspace membership and role-based access enforced in the Rust backend.

Tauri 2 · Rust · React · Ollama

DocAudit-AI

Prototype

Deterministic documentation auditing

Audits technical documents against a style profile (technical, academic, or GRC and AI governance): sentence length, terminology, acronym definitions, and readability.

Python · Streamlit

Microcopy-Lab

Prototype

Interface content catalog and audit

Import UI strings, run advisory rule checks, preview them in simulated interfaces, record editorial decisions, and export the results.

Python · Streamlit · Ollama

Sprint2Docs-AI

Prototype

Release notes from sprint changes

Imports change records and drafts customer and technical release notes with a local model. Every generated statement stays pending until an editor verifies it.

Python · Streamlit · Ollama

KnowledgeBridge-AI

Prototype

Source-grounded answers from local documents

Persistent local document libraries with hybrid keyword and semantic search, cited answers, and abstention when the evidence is missing.

Python · Streamlit · Chroma · SQLite · Ollama

Research2Docs-AI

Planned

Research into audience-specific content

Transforms research papers and technical specifications into explainers, tutorials, and FAQs that keep source references and flag claims needing verification.

Product requirements defined

Want a closer look?

Demos are available on request.