Case Studies

Challenge: Stand up an accredited secure environment for a defence research programme, covering ISO 27001, ISO 9001 and the controls expected by international defence prime contractors and supply-chain assessors, without adding load to a small research and IT team.

Solution: ORCA Opti delivered a managed secure environment end to end: ISO 27001 aligned controls deployed and tested automatically, SOPs and policies aligned to international defence procurement expectations, and ISO 9001 and ISO 27001 management systems at the core. Controls and evidence were assembled inside ORCA, ready for defence supplier assessment, with very little load on the customer's research and IT teams.

Challenge: An international cybersecurity consulting practice working with government clients needed ISO 9001 and ISO 27001 to be procurement-ready, plus a safe way for the team to use AI when drafting tenders and proposals without sending sensitive customer information into frontier models or being exposed to prompt injection.

Solution: ORCA Opti stood up ISO 9001 and ISO 27001 management systems alongside international cybersecurity controls in three weeks, with incident management and automated resolution workflows running from day one. AI Guardian provided a sovereign, protected AI environment so the team could write tenders and business proposals confidently, with customer data kept out of frontier models and prompts shielded from injection and other attacks.

Challenge: A small clinical trials site, with a team of 7 specialists and 4 coordinators running multiple concurrent trials, was losing 1 to 2 hours per person per day searching protocols, pharmacy manuals and regulatory documents to answer patient and procedural questions.

Solution: ORCA Opti deployed Opti Assist inside the site's own Microsoft 365 tenant, securely indexing every active trial's documentation. Coordinators and clinicians ask natural-language questions and get instant, source-cited answers, with no patient data or trial documents leaving the tenant. Human-in-the-loop validation and ISO/IEC 42001-aligned governance are built in.