Sovereign AI for accountancy and audit firms: modern automation without the data ever leaving your walls

Why accountancy and audit firms cannot use public cloud AI

Mickai is a sovereign intelligence operating system that regulated businesses own and run inside their own walls. For accountancy and audit firms, that sentence is the whole argument. You hold client money detail, tax positions, board minutes, whistleblower reports, personal financial data, and the evidence that underpins a signed audit opinion. Most of it is legally privileged, commercially sensitive, or special category data under UK GDPR. When you paste it into a public cloud AI tool, you send it across a network boundary you do not control, into a system you cannot inspect, governed by contracts you cannot enforce line by line. For a great many of the tasks a partner would love to automate, that is not a policy preference. It is a rule you cannot lawfully break.

We built Mickai for exactly this constraint. We run entirely on your own hardware, on premises and air gapped, with zero data egress and no public cloud round trip. Nothing leaves the building. There is no vendor endpoint to breach, no third party sub processor to vet, no cross border transfer to justify to a regulator. The model comes to your data. Your data never goes to the model.

The regulatory wall is real, and it is getting higher

We did not invent the demand. Regulation created it. The US CLOUD Act means data held by a US linked cloud provider can be reached by US authorities regardless of where the servers sit, which is difficult to square with client confidentiality and, in some engagements, with legal privilege. The NIS Regulations, ITAR and EAR, and the EU AI Act high risk classification each add categories of information that cannot sit in a general purpose public model. UK GDPR special category data carries its own transfer and processing constraints. For firms serving financial services clients, PRA model risk expectations (SS1/23) push the same way. For those touching health data, the NHS Data Security and Protection Toolkit does too.

Add it up and the market is not a niche. Around 0.85 million UK businesses, roughly 15 percent, legally cannot send data to public cloud AI, and about 5 million more across the EU sit in the same position. The sovereign AI market was roughly USD 40 billion in 2025 and is on track for about USD 148 billion by 2032. Accountancy and audit firms are squarely inside that wall, because you are the trusted custodian of other people's most sensitive numbers.

What we run, and why it is reproducible

We run about fifty specialist models, twenty five domain and twenty five operational, with cross model routing under a deterministic arbiter. That last phrase matters for audit. When a firm asks an AI system to reach a conclusion, the profession's question is not only whether the answer is right. It is whether the same inputs produce the same answer every time, and whether you can show your working. A deterministic arbiter means the routing and the output are reproducible, not a fresh roll of the dice on each run. We keep the sovereign models on your hardware, so the reasoning that touches your clients' data stays inside your control.

For a practice, the relevant capabilities arrive as studios. Aletheia handles audit. Nemesis covers fraud and anti money laundering. Plutus supports finance and FP&A, Tyche underwriting, Prometheus forecasting, Nomos compliance, Astraea legal, Pythia business intelligence, Iris customer service, Panacea clinical work, and Vinis voice. Trust Agent is the perimeter, the Agentic Marketing Team runs outbound, and OAR as a Service exposes the audit ledger to systems that need it. Greek names, serious functions.

The Open Audit Record: evidence a regulator can trust without trusting the vendor

Audit firms live or die on evidence. So the centre of our design is the Open Audit Record. Every consequential action the system takes is signed under post quantum cryptography (FIPS 204 ML-DSA-65, with ML-KEM-768) and hash chained into a tamper evident, append only ledger. Anyone can verify that ledger offline, for decades, without trusting us and without calling home to a vendor server. If a record were altered after the fact, the chain would break and the verification would fail. That is the property a regulator, a court, or a quality reviewer actually wants: not our assurance that the log is honest, but mathematics that lets them check for themselves.

For a firm, this changes the character of AI assisted work. Every step an AI took inside an engagement carries its own signed, independently verifiable evidence trail. When a file is reviewed years later, the record stands on its own. Post quantum signing means it still stands when today's cryptography no longer does. We chose that now, rather than leaving firms to re sign a decade of evidence later.

Attestation across sites, with no central server

Larger firms run many offices, and increasingly many jurisdictions. Pantheon, our post quantum Layer 1 (on testnet), gives multi node attestation across fielded units with no central server. Each unit can attest to the others without a single point that, if it failed or were compromised, would put the whole network in question. For a multi office practice, that means a shared, verifiable record of what the system did, without funnelling every office's sensitive data through one hub you would then have to defend.

The intellectual property behind the claims

These are not marketing phrases layered over someone else's platform. The architecture is protected by 104 filed UK patent applications, roughly 2,340 claims, across 13 invention families, owned by Mickai LTD, named inventor Mickarle Sean Junior Wagstaff-Irons. To be precise, these are filed applications, not granted patents. Filing establishes priority and builds a prior art moat around the design. For a buyer, that precision is the point. We would rather state exactly what we hold than round it up.

Who we are

Mickai LTD is a UK company, Companies House number 17166618, with manufacturing secured in Birmingham. Micky Irons is founder and CEO. Mickai is built and live today. It is not a concept, a roadmap, or a pilot waiting for a grant. A firm can run it inside its own walls now.

Two markets, one architecture

Our commercial thesis has two sides that reinforce each other. First, we sell sovereign AI to the regulated firms the public cloud cannot lawfully reach, which is where accountancy and audit practices sit. Second, we license the patented stack to the platforms that want to reach those same firms. Internal analysis maps 196 companies and 311 patent company pairs as potential licensees, including names such as Microsoft, AWS, NVIDIA, Google, Adobe, and IBM. That is potential licensee sizing, not a signed book of business and not an infringement claim against anyone. We are an ally to the AI majors, not an OpenAI killer. Any platform that adds a sovereign layer instantly reaches a regulated market it cannot serve today, and the architecture that makes that possible already exists and is protected.

For an accountancy or audit firm the practical takeaway is simpler. You can finally apply modern AI to the work that has been off limits, the privileged files, the special category data, the client money detail, without the data ever leaving your control, and with a signed, independently verifiable record of everything the system did. That is the capability, and the regulatory wall that created the need for it is not going down.

Our pre-seed round is opening soon, and we welcome inquiries from interested partners by email at micky@mickai.co.uk or on LinkedIn.

Does Mickai send any client data to the cloud?

No. We run entirely on your own hardware, on premises and air gapped, with zero data egress and no public cloud round trip. The model runs where your data already sits, so client information never crosses a network boundary you do not control.

Can an auditor or regulator verify what the AI did?

Yes. Every consequential action is signed under post quantum cryptography (FIPS 204 ML-DSA-65, with ML-KEM-768) and hash chained into a tamper evident, append only ledger through the Open Audit Record. Anyone can verify that ledger offline, for decades, without trusting the vendor. If a record were altered, the chain would break on verification.

Is this a real product or a roadmap?

It is built and live today. Mickai LTD is a UK company (Companies House 17166618) with manufacturing secured in Birmingham, and the architecture is protected by 104 filed UK patent applications across 13 invention families. A firm can run the system inside its own walls now.