One graph. Five modules. Every cycle makes you stronger.
AirTee.ai runs the whole resilience loop on a single dependency graph. That's the difference between a system of record and a system of action.
Your business, modelled once.
Services, dependencies, owners, vendors, controls, plans, exercises and incidents — all in one model. Every module reads from it, writes to it.
- ▍Critical services, ranked by impact and recovery objective.
- ▍Upstream and downstream dependencies, including 4th-party.
- ▍Owners, deputies and on-call rotations.
- ▍Vendor concentration, contractual SLAs and exit plans.
- ▍Controls mapped to ISO 27001, NIST CSF 2.0, DORA and SOC 2.
- ▍Plans, scenarios and runbooks linked to the services they protect.
Five surfaces over one truth.
Live war room with AI-suggested actions, MITRE & DORA mapping, and regulator-clock automation.
Plans and impact analyses that update from real signal — incidents, exercises, dependency changes.
Live posture from third parties, concentration analysis, automated review cadences.
Schedule, run and grade tabletops; AirTee plays controller and writes the AAR.
Drafts the AAR, proposes control updates, files lessons-learned automatically.
One library mapped to every framework you report on — kept current by the loop above.
Live in 14 days. Migrated in 60.
- ▍Day 1–7: connect identity, ITSM, SIEM and one comms channel.
- ▍Day 7–14: import critical services + first BIA pass.
- ▍Day 14–30: AirTee runs your first guided tabletop.
- ▍Day 30–60: BCPs migrated, vendor profiles backfilled, board view live.
- ▍Single-tenant deployments available for regulated customers.
- ▍UK, EU or US data residency.
The GRC-A Preparedness Dashboard.
One pane for Governance, Risk, Compliance and Audit. Overall readiness, lifecycle stages — preparedness, operational, remediation — and resilience maturity, all weighted by organisational impact.

Quick answers
- Is AirTee a GRC tool?
- No. AirTee is a system of action: it runs incidents and exercises in the same workspace where it stores plans and risk. GRC platforms like Archer or Riskonnect are systems of record — necessary, but not what AirTee replaces.
- Do we need to rip-and-replace ServiceNow?
- No. AirTee complements ITSM. We subscribe to ServiceNow events and write incident records back. Many customers run AirTee on top of ServiceNow.
- What about our existing BIA spreadsheets?
- We import them. The first pass is automated; we sit with you to validate the dependency graph in week 2.
See AirTee in your environment.
We'll model one of your real scenarios live.