Tom Phillips Labs
Available for client work

Tom Phillips Labs

Applied-AI experiments, tools and shipped products.

CurrentlyShipping Narrate Compliance v2

Tom Phillips Labs is where I build and write up applied-AI work: systems for governance, risk, compliance and automation, from commercial SaaS to mobile apps and internal tooling. Each one is shipped, then documented properly rather than screenshotted.

Built by Tom Phillips — AI engineer, United Kingdom. Everything here reached production, and is written up as it was built.

5
Products shipped
4
Client engagements
90%+
Manual time saved
Stack

What's running

26 of 28 active
AI/ML
  • OpenAI GPT-4o
  • Azure OpenAI
  • Anthropic Claude
  • Whisper
  • RAG
  • Dify
  • n8n
  • Vector DB
  • ElevenLabs
  • LangChain
Backend
  • Python
  • FastAPI
  • Supabase
  • PostgreSQL
  • Stripe
Frontend
  • Next.js 16
  • React 19
  • TypeScript
  • Tailwind v4
  • Capacitor
Cloud
  • Vercel
  • Azure
  • Docker
Security
  • RSA Archer
  • OneTrust
  • ISO/IEC 42001
  • EU AI Act
  • RBAC + RLS
Working together

Available for client projects

Remote-first, working with businesses across the UK.

Custom software engineering

Building the thing you can't buy off the shelf — internal tools, customer-facing applications, and the integrations that hold them together. Specified, built, tested and handed over with documentation, not left as a prototype.

AI integration & automation

Putting language models to work inside systems that already exist: retrieval over your own documents, automated document handling, and workflows that remove manual steps. With the unglamorous parts — evaluation, cost ceilings, and knowing when the model is wrong — treated as part of the job.

Products

Software you can subscribe to

Built here, run here, and licensed to businesses that need them.

Narrate Compliance

Live

From gap assessment to certification, in one platform.

ISO compliance software for organisations working toward ISO/IEC 42001 and the EU AI Act. Clause-by-clause assessments, generated document packs, evidence management and an immutable audit trail, with separate modes for companies, consultants and auditors.

  • ISO/IEC 42001 and EU AI Act aligned workflows
  • 100+ generated policy and procedure documents
  • Evidence analysis with confidence scoring
  • Multi-tenant, with auditor access built in
Three tiers — see site

Expiry

Live

Never miss a renewal.

Contract management for teams that have lost track of what renews when. Document scanning pulls dates, costs and renewal terms out of PDFs and Word files, then surfaces them as alerts, a cost dashboard and a calendar of every expiry.

  • Scanning extracts dates, costs and renewal terms
  • Configurable alerts ahead of each expiry
  • Multi-currency cost dashboard
  • Calendar view across the whole portfolio
Pricing on request

BowlerChart

Live

A ledger for the numbers that matter.

Strategy tracking that turns objectives into monthly accountability cycles. Red/amber/green signals make performance shifts obvious at a glance — built for founders, operators and heads of strategy who have outgrown the spreadsheet.

  • KPI tracking (Hoshin Kanri) and segment scoring
  • Guided onboarding — no spreadsheet setup
  • Shareable links for stakeholders
  • PNG and PDF export
Free

Dad & Baby

Live

The pregnancy companion built for dads.

A UK-focused companion app for expectant and new fathers, shipped to iOS and Android. Week-by-week guidance, NHS-aligned tracking, a contraction timer and hospital checklists.

  • Week-by-week guides, weeks 4 to 40
  • NHS birth plan builder with PDF export
  • Contraction timer with 3-1-1 labour detection
  • Baby tracker and milestone log
DadPro — £4.99/month
Work

Flagship projects

Production systems built and shipped.

AI auditing & anomaly monitoringLive

Neural Oversight

The AI landscape, distilled daily.

A free AI intelligence hub aggregating 48+ sources into curated daily briefings, with risk scoring, entity graphs, and a real-time regulatory tracker for researchers, policy makers, and governance teams.

  • Risk scoring (1–10) on every story for automated triage
  • Entity intelligence across companies, people & research labs
  • AI chat grounded in cited sources

Next.js · TypeScript · Supabase · OpenAI · Vercel

AI governance & compliance SaaSLive

Narrate Compliance

From gap assessment to certification, in one platform.

Commercial ISO compliance SaaS — Align (clause-by-clause assessments), Toolkit (100+ generated documents), Narrator AI, Evidence Management, Governance Recorder, and immutable audit logs. Supports companies, consultants, auditors, and admins.

  • ISO/IEC 42001 & EU AI Act aligned workflows
  • GPT-4o evidence analysis with confidence scoring
  • Whisper-powered governance recorder → minutes & tasks

Next.js 14 · TypeScript · Supabase · OpenAI · Stripe · Vercel

Cross-platform mobile (Capacitor)Live

Dad & Baby

The pregnancy companion built for dads.

A UK-focused cross-platform companion shipped to iOS and Android via Capacitor — week-by-week guidance, NHS-aligned tracking, contraction timer, hospital checklists, and a private community for expectant and new fathers.

  • Week-by-week video guides (weeks 4–40)
  • NHS birth plan builder with PDF export
  • Contraction timer with 3-1-1 labour detection

Capacitor · TypeScript · iOS · Android · Supabase

AI voice cloning · AccessibilityLive

Voice Legacy

Record your voice while you still can. Speak in it when you can't.

A web + native app for people losing their voice — ALS, throat cancer, PPA, Parkinson's. Bank voice samples while you still have your voice; later, type a phrase and hear it played back in your own cloned voice via ElevenLabs. Built deliberately for the family at diagnosis, not for a SaaS demo reel.

  • ElevenLabs voice cloning with consent-gated bank flow
  • Typed phrase or one-tap saved phrase → live TTS playback
  • 12 sensible default phrases seeded for every new account

Next.js 16 · TypeScript · Supabase · ElevenLabs · Capacitor

Also shipped

Smaller tools

Built to scratch a real itch.

AI reliability & self-healingArchived

SentinelProxy

Self-healing for AI agents.

An asynchronous log-ingestion platform that watches AI agents in production, catches the hallucinations and prompt injections a firewall only blocks, and hands back a patched system prompt. The self-healing layer for Dify, n8n and LiteLLM.

  • Webhook ingest returns 200 instantly — never on your critical path
  • PII scrubbed at the edge before anything is stored (UK GDPR)
  • A background judge grades every call against your guardrails

Next.js · TypeScript · Supabase · Claude Haiku 4.5 · Vercel

Client work

Delivered for enterprise teams

Anonymised case studies — applied AI inside live enterprise environments. Hover to pause, drag to browse.

RAG Agent90%+ time saved per report

Automated Vulnerability Report Analysis

Enterprise security & governance

Cross-references third-party findings against the internal control library and writes the remediation plan.

Difyn8nPythonOpenAI API+2
Read the build notes
Applied AI ApplicationSelf-service · cited

AI-Powered GRC Knowledge Base

Procurement, legal & business teams

Cited, in-plain-English answers sourced live from OneTrust + Archer policy libraries.

DifyVector DBOneTrustRSA Archer+2
Read the build notes
Data PipelineWeekly → real-time

Intelligent Risk Dashboard Automation

Enterprise risk leadership

Pulls Archer + OneTrust on a 15-minute schedule, synthesises the executive narrative, ships it live.

n8nPythonRSA Archer APIOneTrust API+1
Read the build notes
Conversational AI97% faster · 15 min → 30 sec

Automated User Access & Onboarding

Enterprise platform operations

Conversational access-provisioning that replaces a specialist queue with safer, validated self-service.

Difyn8nAzure OpenAI (GPT-4)REST APIs+1
Read the build notes