ARYA NEXUS — Innovate UK 6+1 Grants & R&D Hub (English (UK))

Q: Does the AI ever take action on its own?

No. Detection is driven by deterministic rules. ARYA SAI only produces advisory summaries from redacted evidence, and every containment action requires a named human approver.

Q: Where is our data stored?

You choose UK (London) or EU (Frankfurt) residency at onboarding. Additional regions are available on Enterprise plans.

Q: Are you certified for ISO 27001 or Cyber Essentials?

CSH Compliance helps you prepare evidence for these schemes. We do not claim certifications we have not been awarded; our own certification status is published on the Trust page.

Q: Can we scan any domain or IP address?

Only assets you have verified ownership of via DNS or HTTP token. Unverified assets cannot be scanned or ingested.

Q: Do you work with managed service providers?

Yes. The partner edition supports delegated tenants, pooled licensing and partner billing.

3-Tier Corporate & Governance Architecture

London-Headquartered 3-Tier Research & Governance Hierarchy

TIER 1 · HOLDING & GOVERNANCE

ARYA AI TECHNOLOGY LTD

UK Company No. 17372232

London UK parent company (Company No. 17372232) directing all corporate, financial, legal, and intellectual property governance from One Canada Square, Canary Wharf & City Cyber Center.

TIER 2 · ENGINES & RESEARCH

ARYA AIE & SAI LABS

Applied Intelligence Engines (AIE) & Secure AI Research (SAI). Continual learning, uncertainty quantification (UQ), agentic firewalls, and zero-trust pre-inference DLP.

TIER 3 · UNIFIED PLATFORM

ARYA NEXUS PLATFORM

Unified multi-tenant platform orchestrating models, experiments, OpenAPI 3.1 contracts, PostgreSQL 16 FORCE RLS, and the 6+1 Innovate UK grant portfolio in one sovereign core.

Innovate UK R&D Portfolio

Innovate UK 6+1 Grants & Work Packages Ledger

Package / Grant ID	R&D Engine & Focus Area	Budget	Sprint Status	Verified Metric	Live Simulation
Grant 10104592 Innovate UK Smart	ARYA AIE LEARN Adaptive Core · Continual Learning & Uncertainty Engine	£750,000	Sprint 1–6 Completed	Brier < 0.04 · 68% Savings	Explore
Grant FP-2026 Frontier AI SME	ARYA AIE TRUST Guardian Core · Agentic Firewall & Tool Interception	£600,000	Sprint 4–8 Verified	Zero Indirect Injection	Explore
Grant DT-8820 Digital Twin Pathways	ARYA Digital Twin Maritime Ports & Industrial Production CPS Mesh	£850,000	Sprint 6–12 Active	Mesh Latency < 12ms	Explore
Grant AG-4410 ADOPT Clean Agri	ARYA AgriAI Lab Precision Irrigation & Soil Moisture Telemetry	£500,000	Sprint 3–8 In Progress	40% Water Savings	Explore
Grant HB-9912 Life Sciences & Bio	ARYA Health/Bio Twin Biomolecular Simulation & Clinical IoMT Privacy	£950,000	R&D Phase 1	Zero PHI Egress Attested	R&D
Grant CE-3321 Clean Transport & EV	ARYA Clean Mobility EV Fleet & OCPP 2.0.1 Microgrid Posture	£700,000	Sprint 2–6 In Progress	EV-SAFE-001 Actuation Lock	Explore
+1 Core Infra Sovereign Core	ARYA NEXUS Sovereign Core Multi-Tenant PostgreSQL 16 FORCE RLS, Docker Compose, Coolify	£1,200,000	Live in Production	100% Tenant Isolation (403 Proof)	Open Console

24-Week Development Package

Architecture Components & Sprint Deliverables

Component	Specification & Deliverables	Sprint Range	Verification Status
Technical Specification	System architecture, security boundaries, modules & dependency matrix	Sprint 1–2	Approved
Sprint Plan	24-week delivery roadmap, milestones & acceptance criteria	Sprint 1–24	In Progress
PostgreSQL	Multi-tenant schema, relations & FORCE Row Level Security (RLS) policies	Sprint 2–4	Production
REST API	OpenAPI 3.1 contract, auth, alerts, incidents, assets & idempotency	Sprint 4–8	Production
Backend	FastAPI, SQLAlchemy, Alembic migrations & background task runners	Sprint 6–12	Production
Frontend	Next.js / SSR, ARYA AI SME fleet admin control plane & role workspaces	Sprint 8–16	Production
Security Engine	Event collectors, versioned Sigma detection rules & deterministic triage	Sprint 10–18	Production
ARYA SAI	Safe AI analytical integration, pre-inference DLP & redacted synthesis	Sprint 12–20	Production
Deployment	Docker Compose, Coolify, sovereign multi-region hosting & CI/CD pipeline	Sprint 18–22	Ready
Testing	Unit, integration, tenant-isolation & cross-tenant 403 pen tests	Sprint 20–24	17/17 Passed

Interactive R&D Simulation Controls

Direct Live Triggers for Innovate UK Engines

AIE LEARN: UQ Engine

Evaluates epistemic uncertainty and continual retraining thresholds.

Digital Twin: Port Mesh

Simulates container terminal and port cyber-physical sensor mesh.

AgriAI: Precision Irrigation

Analyzes soil moisture telemetry and optimizes precision irrigation valves.

Verified Architecture Specifications · E-E-A-T Grounding Reference

Deterministic Technical Controls & Machine-Verifiable Evidence

OpenAPI 3.1 Contract Trust & PQC Center

1. Detection Engine (CSH Sentinel): Git-versioned Sigma rules (CSH-RULE-001..004) mapped to MITRE ATT&CK (T1110.001, T1098.003, T1048, T1190) with idempotent dedupe_key ingestion and SHA-256 immutable event hashes.
2. AI & MCP Firewall (CSH AI Guard): Pre-inference DLP scrubbing ([REDACTED_SECRET], [REDACTED_PII]), explicit per-agent Model Context Protocol (MCP) tool allowlists, and indirect prompt-injection blocking.
3. Database Isolation (PostgreSQL 16): Enforces ENABLE / FORCE ROW LEVEL SECURITY across all 20 tenant tables bound to transaction-local current_tenant_id(); cross-tenant queries fail closed with HTTP 403.
4. Human-Gated Containment: Zero autonomous destructive actions. Host isolation (isolate_host) and credential revocation require named human step-up approval recorded in an append-only audit trail.
5. Verified Exposure & GRC (CSH Scan): Cryptographic DNS TXT or HTTP ownership token required before scanning. Continuous evidence aligned with UK NCSC Cyber Essentials Plus, UK GDPR & Data Protection Act 2018, ISO/IEC 27001:2022.
6. Post-Quantum Roadmap (CSH Quantum): Cryptographic inventory tracking RSA/ECDSA/TLS keys against UK NCSC 2028 discovery, 2031 priority migration (ML-KEM / ML-DSA), and 2035 full PQC completion.

Operated by ARYA AI TECHNOLOGY LTD (Registered in England & Wales, Company No. 17372232) · Canonical Domain: cybersecurityhouse.com Regional Data Residency: UK-LON · EU-FRA · MENA-RUH · APAC-TYO · RFC 9116: /.well-known/security.txt

Frequently asked questions

Does the AI ever take action on its own?

No. Detection is driven by deterministic rules. ARYA SAI only produces advisory summaries from redacted evidence, and every containment action requires a named human approver.

Where is our data stored?

You choose UK (London) or EU (Frankfurt) residency at onboarding. Additional regions are available on Enterprise plans.

Are you certified for ISO 27001 or Cyber Essentials?

CSH Compliance helps you prepare evidence for these schemes. We do not claim certifications we have not been awarded; our own certification status is published on the Trust page.

Can we scan any domain or IP address?

Only assets you have verified ownership of via DNS or HTTP token. Unverified assets cannot be scanned or ingested.

Do you work with managed service providers?

Yes. The partner edition supports delegated tenants, pooled licensing and partner billing.

See it running on your own environment

A 30-minute scoped walkthrough with a security engineer. No slides.

UK Registered (Company No. 17372232)
UK & EU data residency
Available in 15 languages