Governed AI for Azerbaijani institutions,
built for the pipeline, the terminal, the bank and the service centre

The Southern Gas Corridor: allocation across separately regulated segments

Caspian gas from the Shah Deniz field reaches European markets through the Southern Gas Corridor, a chain of pipeline segments that are separately owned, separately operated and separately regulated as they cross from Azerbaijan through Georgia and Turkey and onward into Europe. No single regulator sees the whole system. What holds it together is the set of agreed measurements and allocations passed between operators at each interconnection point, and each of those handovers is a place where two parties, answering to two authorities, have to arrive at the same number.

Entry and exit metering, calorific value and quality specification, nomination and re-nomination, shipper allocation, imbalance accounting and transit tariff computation are the evidence base for every commercially significant claim in the chain. Where AI assists in reconciling metering series, computing allocations, detecting anomalies in a flow trace or drafting an operational notice, the platform validates the input before the model runs, validates what comes back against the operator's own rules, escalates to a named person wherever the answer would change a quantity attributed to a counterparty, and writes one immutable ledger row for every call -- actor, action, inputs, outputs, model version and verdict. Allocation disputes are settled on the record, and a record that can be re-run exactly as it stood is a different kind of answer from a recollection of how the number was reached.

Azeri-Chirag-Gunashli: production sharing and cost recovery under audit

The Azeri-Chirag-Gunashli fields in the Caspian operate under long-term production-sharing arrangements between the state and an international consortium, and the Baku-Tbilisi-Ceyhan pipeline carries the crude across Georgia and Turkey to the Mediterranean. A production-sharing arrangement is, in accounting terms, a machine for converting records into entitlements: recoverable costs are audited, cost oil and profit oil are computed from measured production, and each party's lifting entitlement follows from the computation. Every input to it will eventually be examined by a party whose share moves in the opposite direction.

Cost classification and recovery claims, capital and operating expenditure records, production measurement, allocation between partners, lifting schedules, bill-of-lading lineage and joint-venture billing all sit inside that audit perimeter. The governed chokepoint applies to every AI-assisted step across it: classifying an expenditure, reconciling a production series, drafting a partner statement, scoring a cost claim for review. Role-scoped access lets the operator, the state party, consortium partners, financiers and independent auditors each see exactly what their mandate permits and no more, and the evidence exports per party and per arrangement so that an audit is answered with records rather than with assurances. Where a computation affects an entitlement, it escalates to a person before it lands.

SOCAR as counterparty across long-term arrangements

SOCAR is the state energy company and the counterparty on a great many of these arrangements at once: a party to the production-sharing agreements, a shareholder in pipeline and midstream ventures, an operator of domestic production, refining and distribution, a participant in trading and in downstream assets abroad. The same organization therefore appears on multiple sides of the same evidence base -- as a partner whose costs are audited, as a shipper whose volumes are allocated, as a seller whose deliveries are measured and as a state instrumentality whose reporting is read by public authorities.

That multiplicity is precisely why enforcement belongs at the point of the call rather than in a policy that different departments interpret differently. One chokepoint, with jurisdiction-specific and arrangement-specific rules applied at the same point, means a volume figure produced for a partner statement, a supervisory return and a commercial invoice comes from the same governed path with the same audit lineage. Input validation before the model runs, output validation against the organization's own rules, human escalation wherever a number affects a counterparty's entitlement, and an immutable row per call let each reader -- a partner, an auditor, a regulator, a lender -- test the same figure without a reconciliation exercise afterwards.

The Middle Corridor and the Port of Baku at Alat

Azerbaijan sits on the trans-Caspian freight route between Central Asia and Turkey and Europe, and the Port of Baku at Alat is the maritime link in it, with rail, road and free-zone operations alongside. A container moving along that corridor changes mode more than once and crosses several customs jurisdictions, and at every crossing the cargo is represented by documents: manifests, transit declarations, certificates of origin, phytosanitary and dangerous-goods paperwork, weight and seal records. The corridor moves at the speed of its documentation, and a document that cannot be verified stops the box.

Where AI assists in classifying goods, extracting fields from a shipping document, screening a party against sanctions lists, matching a manifest to a declaration or estimating a duty, the same enforcement applies: validation before the model runs, validation of the output against the operator's own and the customs administration's rules, escalation to a named person wherever a classification or a screening result would hold or release a consignment, and an immutable ledger row for every call. Because the corridor spans several authorities, jurisdiction-specific policy is enforced at the same chokepoint rather than in separate systems that drift apart, and the evidence exports per shipment so that a query from one customs administration is answered with the record the next one will also read.

Central Bank supervision and sovereign fund reporting

The Central Bank of Azerbaijan conducts monetary policy and supervises banks, payment providers and insurers, with prudential expectations on risk management, outsourcing, consumer protection, cybersecurity and financial crime that apply to AI-assisted processes on the same terms as to any other. Alongside the banking system, a sovereign wealth fund holds the state's share of energy revenues, and a fund of that kind carries reporting expectations of its own: what was received, how it was managed, what was transferred and on what basis, read by public authorities, by counterparties and by anyone assessing the country's fiscal position.

Screening is enforced rather than advisory: a sanctions or anti-money-laundering hit blocks the call, an override escalates to a named person, and the override decision, its reason and its author are themselves written to the ledger. Credit and risk models, transaction monitoring, supervisory returns, reserve and revenue reconciliation and disclosure drafting all run through the same governed chokepoint, with outputs validated against the institution's own rules before they reach a customer or a decision-maker. The organization carries the obligation -- a platform does not deliver compliance -- but evidence produced once, in a form a supervisor, an internal auditor and an external reader each accept, is what makes the obligation tractable.

Personal data and the ASAN single-window model

Azerbaijan's personal data legislation governs the collection and processing of information about individuals, and the ASAN service centres are a notable public-service delivery model: many agencies' services delivered at one counter, which is a genuine convenience for citizens and, in data terms, a concentration. A single-window model means a person's interactions with civil registration, licensing, social benefits, tax and other functions meet in one operational environment, and it means an operator at that counter is a step away from far more information than any one transaction requires.

So the protections have to execute in code rather than depend on a policy being followed. The platform enforces minimization at the point of capture so that a transaction sees only the fields its function requires, role-scoped access so an operator's view is bounded by their role, content-logging modes that store a verifiable fingerprint instead of the content itself where content must not be retained, and an immutable record of every access -- who looked, when, and under what authority. Certified deletion produces a tamper-evident certificate when a dataset must genuinely be gone. Where AI assists in classifying a request, extracting a field, drafting a determination or routing a case, the output is validated against the agency's own rules before it reaches a decision-maker, with escalation to a person wherever a determination affects an individual's entitlement -- and the citizen's question of why a decision went the way it did is answered from the record.

On-premise deployment inside Azerbaijani facilities

Enforcement, inference and audit logging run inside the institution's own environment -- a data centre in Baku, an operations centre at a terminal, a bank's own facility, a plant at Sumqayit, a power station at Mingachevir, a service centre counter. Data does not leave the perimeter in order to be processed, which is the only version of data residency that actually holds.

Air-gapped operation as a supported configuration

For allocation and metering records, cost-recovery files inside an audit perimeter, supervisory returns or citizen data from a single-window centre, deploy with no outbound path at all. The platform does not phone home for telemetry, licence checks or model routing, so an air gap is a supported configuration rather than a degraded one.

Offline-capable enforcement along the line and the corridor

Governance does not pause when connectivity does. At an offshore platform, a compressor station, a metering point on the line, the port at Alat, a rail interchange or a district service counter, validation still executes and the ledger still writes, and records created while disconnected reconcile cleanly when the link returns.

Jurisdictional residency across transit segments and partners

Pipeline transit, consortium arrangements, corridor freight and financial supervision each touch more than one legal regime. Deploy so that data governed by one jurisdiction's rules stays where those rules require, and so that each partner's and each authority's policy is enforced at the same chokepoint rather than in separate systems that drift apart.