Aona AI Workforce AI Security and Governance

Aona AI is a Sydney-based company founded in October 2023 by Bastien Cabirou and Salim Sebkhi. It builds workforce AI security, helping organizations see how employees use AI tools, enforce AI policies and protect sensitive data, and has been backed by Antler, Tenity and angel investors since June 2025.

The platform runs as a browser plugin, Windows and macOS desktop apps, an admin dashboard and APIs. It tracks more than 10,000 AI tools and shows usage by tool and team on managed devices, applies policies that target specific tools, employee groups and data types, and redacts or blocks sensitive prompts and files such as Word, Excel and PDF documents. Aona Orbital, its purpose-built models and deterministic checks, recognizes sensitive data and evaluates policy. Compliance evidence maps to ISO/IEC 42001, NIST AI RMF and the EU AI Act, and backend hosting can be configured separately.

• Shadow AI discovery: tracks 10,000+ AI tools and usage by team on managed devices.
• Policy enforcement: rules by tool, employee group and data type.
• Data protection: redacts or blocks sensitive prompts and Word, Excel and PDF files.
• Aona Orbital: purpose-built models and deterministic checks for sensitive data and policy.
• Multiple surfaces: browser plugin, desktop apps, admin dashboard and APIs.
• Compliance evidence: mapped to ISO/IEC 42001, NIST AI RMF and the EU AI Act.

Vietnamese banks and insurers can stop staff from pasting customer data into public chatbots while still allowing approved AI tools. Software outsourcing firms can protect client code and documents across teams. Hospitals and clinics can track AI use by medical staff to meet data protection rules.

Companies see which AI tools staff actually use instead of guessing about shadow AI. Sensitive prompts and files are redacted or blocked before they reach external AI services. Policies can differ by team and tool, so adoption continues without blanket bans. One Australian healthcare customer reported a 92.8% reduction in shadow AI prompts over 30 days, according to the site.

Employees adopt ChatGPT, Copilot and many niche AI tools faster than IT can approve them, raising data leakage risk. Vietnam's personal data protection rules and growing AI regulation in the region push companies to monitor and control staff AI use rather than ban it.

Founded in October 2023 in Sydney, Australia, by Bastien Cabirou (CEO) and Salim Sebkhi. Backed by Antler, Tenity and angel investors since June 2025. Completed a SOC 2 Type II examination covering security, confidentiality and availability, with the report issued in March 2026. Strategic advisor Abbas Kudrati was Microsoft's Chief Cybersecurity Advisor for Asia.