Tyneside Labs — Vancouver, British Columbia

AI, on the data you are not allowed to be careless with.

We are an agentic AI firm. We work with organizations that want to put AI to work on records they are accountable for, and we build the software that keeps it inside the lines.

Fixed scope, fixed price
Every engagement has a number and an end date before it starts. No hourly billing, no change orders, no open-ended retainer.
It ends in something running
The deliverable is working software against real controls, not a deck that recommends you buy one.
Your infrastructure, your country
Runs where you already run things, on data that stays where you need it to stay.
What we do

One practice, and the software under it.

01

Assessment and delivery

Most of what we do, and where to start.

Organizations want to use AI on data they cannot be careless with — patient records, client files, anything a procurement questionnaire asks about. We work out what your obligations actually require, then build one workflow against those controls so the answer is evidence rather than advice.

  • Two weeks, CA$9,000 fixed, ending in a written position and one workflow running.
  • Then build the rest to the same standard, at a fixed price, or take it in-house.
  • For clinics, law firms, suppliers to BC public bodies, and anyone holding a security questionnaire.
The assessment, in detail
02

Access control for agents

Connect the identity provider you already run.

An agent usually shows up holding one person's entire access. Point it here instead and it inherits exactly what that person's groups allow — no shared keys, no standing credentials, nothing new for you to administer. Take someone out of a group and their agents lose that access with them.

  • A tool the caller may not use is simply not offered, so nothing can talk the agent into reaching for it.
  • Anything destructive stops and waits for a named person to approve it, without blocking everything else.
  • Every action leaves a signed record that shows whether anyone has edited it.
Ask about early access
03

The system underneath

What we build on, and what we give away.

The engagements above are delivered on our own platform: the records, the rules, the screens and the approvals are generated from how a business actually works, so a change is a change to the rules rather than a rebuild. The pieces that are useful on their own are open source and permissively licensed.

  • SDKs in Python and TypeScript for teams building their own agents.
  • The audit and receipts layer, MIT and Apache-2.0 — take it, ship it, never talk to us.
  • Not sold as a product yet. Today it is how the work gets done.
See the open source
How we work

Beside what you have, not instead of it.

A small firm sells into the stack a customer already runs, or it does not sell.

  1. We start with what you already run

    Your identity provider, your infrastructure, your data, where it already lives. Nothing gets replaced to make room for us.

  2. The rules live in one place

    What people and agents may do is decided once and enforced everywhere, instead of being reimplemented in each application that needs it.

  3. Agents are governed, not hosted

    Run them wherever you already run them. What we decide is what they can reach, and what has to wait for a person.

  4. Every engagement leaves something behind

    The controls, the templates and the evidence become reusable, so the second engagement of a kind costs a fraction of the first.

Notes

What we are working on.

Note2026-09-08

Guard the inputs, not just the rule

An access check is only as strong as the question of who is allowed to change the thing it reads. Lorem ipsum dolor sit amet, consectetur adipiscing elit.

Read
Engineering2026-08-30

Evidence beats a log file

Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco.

Read
Note2026-08-14

Why the answer is usually a smaller permission

Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur excepteur sint occaecat.

Read
Get in touch

Start with the assessment.

Two weeks and a fixed price is the cheapest way to find out whether we are useful to each other. If we are not, you will hear that on the first call.