Company

An EMEA operator and a builder. The corridor in two people.

AM8 SASU is a French company building compliance infrastructure for AI companies operating across the EU and the Gulf. One founder owns the regulatory substance. The other owns the system that encodes it. Both are committed to the corridor at both ends.

Why this company exists

Two live AI regimes. One company. No map.

A company selling AI into both the EU and the Gulf faces two rulebooks, two languages, two enforcement clocks, and a board asking what the AI actually returns. Today that gap is mapped by hourly counsel and spreadsheets, because the tooling was built for a different problem: generic GRC platforms treat AI rules as one more checkbox framework, and the AI governance suites are enterprise-priced and single-regime.

The law is jurisdictional. The tooling is not. That is the whole thesis, and it is why AM8 scales by adding regimes rather than by adding frameworks: every new market a customer enters is a new regime, and nobody products that motion.

We started where the pressure is highest and the two clocks actually collide, which is the corridor between Brussels and Abu Dhabi. 2 jurisdictions are live today and 7 more are in build, each of them held to the identical test the first two passed.

Founders

Two owners, two clearly separated remits.

Diane Jouekou Tonmo

Chief Executive Officer

Product definition and regulatory substance. Relocating to Abu Dhabi, long term.

Owns the product definition: what the platform produces, for whom, and to what regulatory standard. She conceived the product, specified it, chose the technology approach and build method, and owns the regulatory substance the platform encodes: the obligation model, the control catalog, the jurisdictional mapping and the document standards.

Over ten years commercialising regulated products across EMEA from a Gulf base: pharmaceuticals, aesthetics and medical devices, including AI-powered medical imaging sold to regulated buyers.
Chief Operating Officer of a Swiss and Dubai advisory, running mandates for public-sector and development clients.
Business development director and appointed reseller partner for a Swiss AI governance and data company in a defined territory. That mandate is where AM8 began.

MBA Les Roches · FMVA · FinTech Industry Professional · Cybersecurity and RegTech Fundamentals · Lean Six Sigma Black Belt

Anthony Médard

Founding Product Engineer and Growth Lead

Architecture and implementation. Full time from day one. Relocating to Abu Dhabi.

Owns architecture and implementation: the obligation engine, document generation, evidence infrastructure, multi-tenant security and the evaluation systems, all built to specification.

Runs an AI-first engineering method: every change is automatically tested before it ships, accuracy is measured under an evaluation protocol registered before results are read, and the platform is reviewed against its own written specification by a pass whose job is to find where it falls short.
Owns go-to-market execution: outbound, building in public, and the design-partner pipeline.
Native French and English.

How we work

We run the standard we sell, on ourselves, continuously.

A compliance vendor that cuts corners on its own compliance is selling something it does not believe. These four rules are what stop that, and they cost us claims we would otherwise have made.

Honesty as architecture

Every claim on this website traces to a register artifact or a passing test, or it comes down the same day. We keep a written register of our public claims and re-check it, because our tagline makes every marketing claim a compliance claim about ourselves.

Live is earned, never declared

A jurisdiction, a feature or a status label only carries the live word once its named test passes. Until then it is labelled in build, in public, where a customer can see it. Marketing enthusiasm is not a valid reason to change a status.

We try to break it before you do

The platform is run against its own written specification by a review pass whose only job is to find where it fails, and those findings are worked before new features are. We would rather find our own gaps than have a customer find them in an audit.

Accuracy is measured, not asserted

Thresholds are fixed before results are read, and figures are published only from verified runs against a stated dataset. We do not put an accuracy percentage on a marketing page, because a number without its dataset and interval is not a measurement.

See our own posture on the Trust Center

Company facts

Checkable, and checked.

Entity

AM8 SASU

Incorporated in Lyon, France, December 2025. RCS Lyon and SIRET on file.

Establishment

EU-established

Lead supervisory authority CNIL. As an EU controller, AM8 needs no Article 27 EU representative.

Data residency

EU (Frankfurt)

Customer data stored and processed in the EU. Every sub-processor and its agreement status is published.

Funding

Bootstrapped

Built from incorporation to a live two-jurisdiction product on founder capital, with no outside investment taken to date.

Talk to the people who built it.

There is no qualification gauntlet and no SDR queue. A founder replies, usually within one business day.

Book a mapping call