Bangkok-headquartered, globally engaged — the AI governance practice where law, technology, and institutional trust converge.
Every major technological era creates a governance problem. The industrial economy created the need for modern commercial and regulatory law. The energy economy created generations of specialists who understood how law, government, capital and industry interact at scale. Artificial intelligence is creating the next one — and Abhiradee Iredale & Partners was established to operate at that intersection.
The firm's foundation brings together two established traditions from opposite sides of the world. On one side, a Canadian legal dynasty: Norman Ridley Iredale, a Calgary barrister and solicitor appointed Queen's Counsel in 1970, didn't just practice law through the formative decades of Canada's energy economy — he helped write the rulebook for an industry that barely had one. His son John carried the practice forward into corporate, commercial, securities and oil & gas law. That firm has since split into a handful of independent practices, each one still thriving today. Jaime Iredale represents the next generation — and he didn't inherit an interest in frontier industries. He inherited the instinct, and has applied it to artificial intelligence.
On the other side, a Southeast Asian institutional lineage: Dr. Kanok Abhiradee, whose career spans corporate leadership, finance, government-linked institutions and aviation, including service as President of Thai Airways International from 2002 to 2006 and recognition as the World's Best Airline Executive in 2005. His experience — built inside institutions where reputation, accountability, government relationships and public confidence intersect — is central to the firm's philosophy that governance is not paperwork. It is trust made operational.
The combination is deliberate. From Canada comes a tradition shaped by law, energy and institutional independence. From Thailand and ASEAN comes decades of experience navigating business, government and capital across a fast-changing region. Together, they create governance that understands both the rulebook and the real world organizations operate in — from Canada's emerging energy economy to the global AI economy.
We are not a technology company. We are not a law firm. We are the specialist practice that sits between the two — fluent in the language of both, accountable to the standards of each. Headquartered in Bangkok with offices across North America and Europe, the firm brings together a founding team of rare depth, rooted in corporate law, elite technical systems engineering, military and defense governance, and international legal practice.
That is not a metaphor. It is the logical conclusion of deploying powerful AI systems at scale without oversight, accountability, or the ability to be questioned, corrected, or shut down. We exist to ensure that outcome does not happen — in Thailand, across Southeast Asia, and in every market we serve.
Our Proprietary MethodologyThe AIP Governance Model — Abhiradee Iredale & Partners' proprietary methodology — is built on the EU AI Act's risk-tiered structure — the world's most comprehensive AI legal framework — and extends outward through the US NIST AI Risk Management Framework and the specific national frameworks of the markets we operate in. The result is a compliance methodology designed to work across multiple jurisdictions at once, updated as frameworks evolve.
Frameworks We Operate Across North AmericaWe serve our clients. Not regulators, not vendors, not investors. Our assessments are independent, our advice is direct, and our reputation depends entirely on the quality of our work.
We maintain active relationships with regulators, government bodies, and industry stakeholders across every jurisdiction we operate in. When frameworks change, we know before our clients need to.
ISO/IEC 42001 Lead Implementer certified. Working fluency across the EU AI Act, US NIST AI RMF, and the region's emerging frameworks. Board-level experience across government, defense, enterprise, and international law. We speak the language of every room.
AI governance is not a project with an end date. Regulations evolve. We build long-term relationships with clients who understand that compliance is a continuous practice, not a one-time exercise.
AI governance across four integrated practice areas — each rigorous, built on a proprietary multi-jurisdiction methodology, and designed for organizations that cannot afford to get this wrong.
Know what you have before you govern it.
Most organizations don't have a complete picture of every AI system running across their operations. We provide that picture — systematically, rigorously, and with the technical depth that separates a genuine audit from a checklist.
From assessed to certified — independently and internationally.
Certification is not the goal. Trust is. We guide organizations through every stage of the certification journey — from gap analysis to third-party audit — and maintain certifications as standards evolve.
The governance infrastructure your organization will operate within — built to last.
We design governance architectures rigorous enough to satisfy demanding regulators and practical enough for operational teams to own. Our proprietary Jurisdictional Compliance Matrix is a sophisticated multi-framework AI tool built for our global footprint.
Compliance that lives inside your organization — not just on your shelf.
A governance framework is only sustainable if the people inside an organization understand it, believe in it, and know how to apply it. We build that capability at every level — from board to engineering team.
Banks, insurers, fintechs, and asset managers under BOT and SEC jurisdiction. AI in credit scoring, fraud detection, and investment advisory face binding governance requirements today, not in some future compliance cycle. Regulators in this sector move fastest of all, because the downside of an ungoverned model is depositor and market confidence, not just a fine on a balance sheet somewhere.
Hospitals, diagnostics, and digital health platforms. Clinical AI is high-risk under every framework globally, from the EU AI Act to FDA's Software as a Medical Device pathway. A compliance failure in healthcare AI is not a fine. It is a front page story, a patient harmed, and a regulator asking why nobody caught it before deployment rather than after.
Agencies, state enterprises, and national health bodies. AI in citizen-facing services faces democratic legitimacy risk layered on top of regulatory risk — a unique and demanding compliance environment where a flawed algorithm does not just breach a statute, it erodes public trust in the institution itself. Government relationships and institutional credibility matter as much here as technical compliance.
Regional operations of global enterprises with complex multi-jurisdictional AI compliance. Any company with European operations or American investors has EU AI Act and NIST RMF exposure today, whether or not that exposure has been mapped internally. The challenge for this client base is rarely a single hard rule — it is reconciling several overlapping frameworks into one coherent, defensible program.
Defense technology suppliers, cybersecurity firms, and dual-use technology companies. This sector is closed to outside entrants — it opens only through relationships earned over years of trusted institutional engagement, not through a credentials page or a cold pitch. Governance here sits alongside national security review, export control, and procurement rules most advisory firms have never had to navigate.
AI developers and platform companies whose products are subject to regulation. Compliance is a sales enabler for these clients — it closes enterprise procurement conversations that non-compliance blocks entirely, particularly with government and financial-sector buyers who now require evidence of governance before a contract is even discussed. Getting this right early is a competitive advantage, not just a legal safeguard.
Shipping lines, port operators, and maritime insurers deploying AI in autonomous vessel systems, cargo and route optimization, and underwriting risk models. IMO guidance on autonomous shipping and flag-state AI requirements are early-stage but moving quickly, and a maritime AI failure carries physical safety consequences alongside regulatory ones.
Manufacturers, fleet operators, and mobility platforms deploying AI in self-driving systems, driver-assistance features, and connected-vehicle networks. Autonomous vehicle regulation is fragmenting faster than almost any other category, with different testing, liability, and deployment rules in nearly every jurisdiction. A safety failure here invites product liability and a fleet-wide shutdown, not just a compliance notice.
Universities, school systems, and ed-tech platforms deploying AI in admissions, grading, and adaptive learning tools. Student data protection law intersects directly with emerging AI transparency rules, and an ungoverned model here risks discriminatory outcomes affecting a student's academic record and future, long before any regulator ever gets involved in the matter.
Energy providers, water utilities, and telecommunications networks operating systems the EU AI Act designates as critical infrastructure under its NIS2-linked framework. AI managing network routing, grid load balancing, or outage response sits squarely in the Act's high-risk tier, and a failure here does not stay contained to one company — it cascades to everyone downstream who depends on the network staying up.
Employers and workforce platforms deploying AI in hiring, performance monitoring, and worker management. This is one of the EU AI Act's named high-risk categories, and one of the fastest-moving areas of US state law besides. An unaudited hiring or monitoring tool exposes an organization to discrimination claims, regulatory penalties, and reputational damage, all from the same root cause.
Law enforcement agencies, border and immigration authorities, and judicial bodies deploying AI in risk assessment, case triage, and decision support. These are among the most tightly restricted categories under the EU AI Act, precisely because the consequences of an ungoverned system fall on someone's liberty, asylum claim, or day in court, not just their wallet.
Offices across North America, Europe, and ASEAN. Built for the regulatory environments that are moving fastest — and the clients that cannot afford to be slow.
Home to the firm's Iredale legal lineage. Advisory grounded in Canada's PIPEDA, Quebec's Law 25, and the Federal Directive on Automated Decision-Making, alongside the US NIST AI Risk Management Framework and the fast-moving patchwork of state-level AI legislation. We monitor Canada's proposed federal AI legislation (Bill C-36) but do not represent it as enacted law we comply with today.
Direct advisory on the EU AI Act — the world's first comprehensive AI legal framework — and its interaction with GDPR. Ireland's position as a European technology hub gives the firm proximity to regulators and enterprise clients alike.
The firm's founding market and institutional home. Government relationships at the highest level. Active working knowledge of Thailand's ETDA AI governance guidelines, the PDPA, and Bank of Thailand and SEC sectoral guidance, alongside Singapore's PDPC/IMDA Model AI Governance Framework.
The most aggressive AI adopter in the region. We monitor the UAE's rapidly developing AI regulatory environment, with proximity to DIFC and ADGM's sophisticated financial ecosystems and sovereign wealth-backed enterprise clients.
A note on regulatory scope: While our offices sit in North America, Europe, and Southeast Asia, our working knowledge extends across the specific frameworks in force in each of those markets — from the EU AI Act and US NIST AI RMF to Thailand, Singapore, and Canada's national instruments. We are precise about which frameworks we hold deep literacy in versus which we monitor, and we say so plainly with each client.
Seven principals across law, technology, defense, and institutional leadership — united by a shared conviction that AI governed well is the defining opportunity of our era.
Seasoned defense and military intelligence professional with deep operational experience across Thailand and ASEAN's defense procurement landscape. As President, he owns day-to-day operations and execution across the firm.
Human TouchA forest monk for nearly 10 years
Traditional legal counsel qualified in Ireland. Ensures every client engagement, partner agreement, and regulatory submission is built on unimpeachable legal foundations. The firm's institutional conscience.
Human TouchPerforms as a DJ internationally
Architect behind the New Zealand Stock Exchange's core trading infrastructure and among Meta's earliest recruits for their crypto-AI division. ISO/IEC 42001 Lead Implementer certified. The technical engine of every client audit.
Human TouchA petrol head, through and through
Microsoft Certified Professional from the age of 16, with five years as a Premier Field Engineer at Microsoft in the UAE. Provides the engineering-level expertise behind every client audit — the technical foundation of the firm's AI governance and compliance work.
Human TouchLoves romantic walks on the beach
A powerhouse connector at the center of the AI and digital-asset economy — deep ties across transnational tech and crypto, including MicroStrategy's ecosystem. Opens doors most firms spend years trying to find.
Human TouchCan't live without 'Ecstatic Dance'
Few figures in the business world carry the institutional weight that Dr. Kanok Abhiradee does in Thailand and across Asia. His career took shape inside institutions where reputation, accountability and public trust are earned over decades, not quarters — a discipline that has defined everything he has built since.
As President and Chief Executive of Thai Airways International from 2002 to 2006, he oversaw the transformation of a national carrier into a globally recognized institution, placing Thailand firmly on the world aviation map and earning recognition as the World's Best Airline Executive in 2005. Alongside that work, he co-founded the SME Bank of Thailand and served as its first President, building the institution from the ground up to give small and medium enterprises genuine access to capital and a real stake in the country's economic growth.
That dual record — running one of Asia's most scrutinized state enterprises while also building a financial institution from nothing — gave Dr. Kanok a vantage point few executives ever earn: an understanding of governance not as paperwork, but as the trust that holds an organization together when everything else is under pressure. It is a lesson he has carried into every boardroom since, and one he considers more valuable than any title he has held.
His reputation today rests on three pillars directly relevant to this firm: corporate governance, organizational transformation, and an unparalleled network spanning Thailand's government, business and institutional landscape. He is, simply, a company reviver — the figure institutions call when the stakes are too high for anything less than six decades of operational wisdom.
As Chairman of Abhiradee Iredale & Partners, Dr. Kanok brings institutional gravity, six decades of operational wisdom, and the relational capital that no amount of marketing can manufacture.
Human TouchBig heart. Brings stray dogs home.
The Iredale name carried weight in Canadian law long before Jaime built anything of his own — an instinct to distinguish right from wrong, impose order on chaos, and correct what is unjust. He chose to build that legacy rather than inherit it.
A serial entrepreneur since his first exit at 22, Jaime founded and sold Canada's first mobile advertising agency, running campaigns for government bodies and provincial courts across oil, automotive, finance, and entertainment. He went on to operate cinemas in Thailand, mentor under Jeffrey Pearlman — co-founder and global CMO of Zumba Fitness — and later found and lead the only integrative health agency serving the superyachting industry, gaining direct exposure to UHNWIs and the family offices that protect their wealth. He was nominated in 2020 for Entrepreneur of the Year, Spain and World's Most Dynamic Entrepreneurs to Watch, declining both once he recognized the entry fee for the racket it was.
In 2023, Jaime nearly lost his life pulling two people from a kitchen fire — an experience he considers a debt owed to God, and an obligation to make the life that followed matter.
That conviction pushed his work deeper into AI and healthcare. He now leads the firm's AI governance practice, with credentials in ISO/IEC 42001 and working knowledge spanning the EU AI Act, healthcare compliance, and the broader regulatory landscape the firm operates across. He is also pursuing a Master's and Doctorate in AI/ML Business Administration from the University of Austin — formal grounding that sharpens the judgment behind every client engagement.
At the heart of Jaime's philosophy is a simple belief: truth is not grey — it is absolute. Inherited from a family of lawyers, that conviction has shaped his life: find the truth, name what is wrong, and build what is necessary to put things right — the same instinct that now drives the firm's AI governance work.
The technology is coming. The question is whether we govern it with the responsibility it demands.
Human TouchServing God and making Him proud
We are precise about the difference between a credential we hold, a framework we have deep working literacy in, and one we monitor for clients. That distinction is the foundation of client trust.
Our anchor credential: the AI Management System (AIMS) implementation qualification for the world's first internationally certifiable AI management standard. It authorizes the firm to design and implement AI management systems to ISO/IEC 42001:2023.
Deep working knowledge of the EU AI Act's risk-tiered structure under its current post-Digital Omnibus timeline. Our GDPR literacy is intersection-specific — Article 22 automated decision-making and the DPIA/AI Act crosswalk — not full privacy-law specialization. We also track the Council of Europe's Framework Convention on AI, the first binding international AI treaty.
Working fluency in the US federal risk-management structure — Govern, Map, Measure, Manage — and its Generative AI Profile. Applied for clients whose operations interface with American regulatory environments or American investors.
Home-market depth in Thailand's ETDA AI governance guidelines and the PDPA, alongside the Bank of Thailand and SEC's AI-relevant sectoral guidance for the financial sector. In Singapore, we track the PDPC/IMDA Model AI Governance Framework, the IMDA's agentic AI addendum, and Singapore's own PDPA — a distinct privacy regime from Thailand's.
Home-jurisdiction fluency in PIPEDA, Quebec's Law 25, and the Federal Directive on Automated Decision-Making. We monitor Bill C-36 (the proposed AI and Data Act) closely, but it remains proposed legislation — we don't represent it as something we currently comply with.
Where the other pillars are organized by jurisdiction, healthcare AI is organized by sector — because clinical AI oversight increasingly runs on frameworks designed to work across borders. Working knowledge of the FDA's Software as a Medical Device framework and IMDRF's internationally harmonized risk classification, plus Predetermined Change Control Plan methodology for continuously-learning clinical AI. Our ISO 13485 fluency is conceptual crosswalk literacy today — full certification is a planned second-year milestone, not a current credential. Our HIPAA knowledge is boundary and crosswalk literacy, not privacy-compliance specialization.
Our methodology also draws on foundational risk and governance concepts — ISO 31000 (risk management), ISO/IEC 23894 (AI risk), and ISO/IEC 38507 (board-level AI governance) — as conceptual grounding that shapes how we work, not as certifications we hold.
Practical intelligence on AI regulation and governance — written for the organizations that need to act on it, not just read about it.
We accept a limited number of new client engagements each quarter. If your organization is facing AI compliance requirements, we welcome your inquiry.
Every engagement begins with a conversation — not a proposal template. Tell us about your organization and your challenge, and we will tell you honestly whether and how we can help.
enquiries@AIPlaw.co
northamerica@AIPlaw.co
europe@AIPlaw.co
middleeast@AIPlaw.co