Proprietary software
Calibra — the software built on CEPF
Calibra is the software that implements the Compliance-Epistemic Project Framework (CEPF). The distinction matters and the two names are not interchangeable: CEPF is the methodology — the regulatory content, the obligations, the overlaps — and Calibra is the application built on top of it.
Beyond the regulatory catalogue, Calibra carries risk, scheduling, operational flow, Gantt and milestones. That is what turns an analysis into a programme: a remediation plan with dates, owners and effort, rather than a list of findings.
It is proprietary to Dynamics Consulting and is used inside engagements — the AI governance and compliance advisory work, and the exposure assessment that usually opens them.
What it holds
- The CEPF catalogue. Version 7, snapshot July 2026 — 19 frameworks mapped onto their operational obligations, 247 requirements, 24 cross-framework overlap groups, 695 document templates.
- Risk. Risks recorded against the obligations they threaten, rather than in a separate register nobody reconciles.
- Time. Scheduling, operational flow, Gantt and milestones for the remediation programme.
- Deliverables. The document templates each obligation requires, and the roles that produce them.
There is a reduced demo online.
The interactive tool on the CEPF page is a demonstration instance, not the production one: it covers nine of the nineteen frameworks in CEPF v7 and a subset of Calibra’s planning functions. Its interface is in Italian.
Where it sits
CEPF is the methodology. Calibra is the software that implements it. Nexus MDS Core is a different thing again: the self-hosted AI platform the systems themselves run on. Calibra governs the programme; Nexus runs the workload.
All three are built and maintained by Dynamics Consulting, an independent AI consulting and engineering practice working on sovereign AI infrastructure, AI governance and regulated environments.
Compliance work that ends in a plan, not a finding
The exposure assessment is the fixed-scope way in: three days on contracts, architecture and supply chain, and a signed document.
Exposure assessment →