Skip to main content

COMPLIANCE HUB

Automotive cybersecurity compliance hub

ISO/SAE 21434 and UNECE R155 / R156 are the global engineering backbone. AIS 189 and AIS 190 keep Indian programmes aligned with the same evidence chain — India-ready, globally aligned.

ENGINEERING EVIDENCE FOR REVIEW

Modern automotive cybersecurity programmes work against three forces — the engineering standard (ISO/SAE 21434), the international regulations (UNECE R155, R156), and India's aligned standards (AIS 189, AIS 190). One evidence chain supports all three when work products are structured well from the start.

ONE EVIDENCE CHAIN

Build engineering evidence once. Use it everywhere.

KAVACH is our Automotive Cybersecurity Engineering Workspace. It connects vehicle architecture to assets, threats, attack paths, controls, and Cybersecurity Case evidence — with engineer-in-the-loop review, deterministic outputs, and AI-assisted acceleration that can be configured or disabled. Agnile’s engineering services close the gaps where the workspace meets programme-specific delivery pressure.

WHERE TO START

Most programmes start with ISO/SAE 21434

  1. 1. Build the engineering backbone. ISO/SAE 21434’s 42 Work Products are the de-facto engineering evidence accepted across UNECE and Indian assessments. Start here.
  2. 2. Translate into regulator language. UNECE R155 cybersecurity assessments and AIS 189 / AIS 190 readiness reviews look for the same underlying work products. The work is presentation and gap closure, not a new engineering chain.
  3. 3. Extend to software-update governance. UNECE R156 and AIS 190 cover software-update authorisation, dependency analysis, and RxSWIN traceability. ISO 24089 is the engineering reference.
  4. 4. Operationalise post-production. Vulnerability management and incident-response evidence runs long after the assessment. The same engineering evidence chain feeds the post-production loop.

BUILT FOR

Three buyer perspectives on the evidence chain

Compliance reads differently depending on whether you own the platform, deliver into the platform, or operate inside India. Each persona page covers the specific pain, evidence, and workflow for that buyer context.

EXPLORE NEXT

Solutions, trust posture, engagement, and ecosystem

Reviewers evaluating KAVACH for a programme typically look at the use-case workflows, trust posture, and engagement options alongside the compliance pages above.

FAQ

Frequently asked

Bring us a programme. We'll show where the evidence chain is strong, weak, or missing.

Sixty-minute working session on a representative architecture. Honest answers on what KAVACH covers cleanly and where engineering services are needed.