Governed AI for Cambodian institutions,
built for the factory floor, the payment rail, the rice mill and the temple archive

Preferential access is conditional, and a review reads the record

Cambodia's garment, footwear and travel goods exports to the European Union have benefited from Everything But Arms preferences, which grant duty-free and quota-free access to least developed countries subject to conditions. Following a review, the European Union withdrew part of those preferences for certain products with effect from August 2020. KriftAI takes no position on the underlying assessment. What matters operationally is the mechanism it made visible: preferential access is granted against conditions, those conditions are reviewed periodically, and a review reads the record that a state, an industry body and an individual exporter can actually produce.

That changes what a compliance function is for. Evidence assembled when it is asked for is weaker than evidence produced continuously, because the first is a reconstruction and the second is a record. Where AI assists in preparing regulatory submissions, classifying goods and origin, tracking commitments, screening suppliers or drafting responses to a due-diligence questionnaire, the platform validates the input before the model runs, validates what comes back against the organization's own rules, writes one immutable ledger row for every call with actor, action, inputs, outputs, model version and verdict, and escalates to a named person wherever the output would become a representation made to a regulator or a buyer. The obligation stays with the organization; better evidence is what makes it tractable.

Garments, footwear and travel goods: an audit chain that reaches into the factory

Garments, footwear and travel goods are the dominant manufacturing sector and the dominant formal employer, and the sector has been audited from the outside for a long time. A long-running International Labour Organization programme monitors and reports on exporting factories; brands and their own auditors run parallel social and quality audits; factories register with the Ministry of Labour and Vocational Training and enrol workers in the National Social Security Fund; minimum wage is set through an annual process; and disputes reach an established arbitration body. European due-diligence expectations, including obligations still being phased in across member states, push the same questions further up the supply chain toward subcontractors and raw material.

Every one of those questions is answered from records: payroll and hours, contract type, age verification, subcontracting declarations, chemical and safety inspections, building and fire records, grievance logs and remediation follow-up. Where AI assists in reconciling payroll data, screening a supplier list, classifying an audit finding, drafting a corrective action plan or answering a buyer's questionnaire, every call passes through one governed chokepoint. Role-scoped access lets the factory, the brand, the industry association and an independent auditor each see exactly what their mandate permits and no more, and a declaration that cannot be re-derived from its source records is not a declaration that survives an audit.

Bakong: a central bank operating the rail it supervises

The National Bank of Cambodia operates Bakong, a retail payment system built on distributed ledger technology, which is unusual: central banks more often set the rules for payment systems that private parties run. Bakong interoperates across banks, microfinance deposit-taking institutions and payment service providers, so a transfer between two customers of two different institutions settles on infrastructure the supervisor itself operates, and cross-border links with neighbouring markets have been added on top of it.

That arrangement raises the evidentiary standard rather than lowering it. Transaction records, settlement finality, participant onboarding, know-your-customer files, transaction monitoring and incident reporting are all read by the same institution that runs the rail. Where AI assists in fraud detection, anti-money-laundering and sanctions screening, dispute handling, reconciliation or customer support, screening is enforced rather than advisory: a hit blocks the call, an override escalates to a named person, and the override decision is itself written to the ledger with its reason. Cambodia was removed from the international list of jurisdictions under increased monitoring in February 2023, and staying off it is a matter of continuously produced evidence rather than a one-time exercise.

Dollarization: a currency field that has to be enforced, not assumed

The riel circulates alongside the US dollar in ordinary commercial life. Prices, wages, loans, deposits, invoices and tax obligations may be denominated in either, sometimes within the same transaction chain, and the National Bank of Cambodia has promoted wider use of the riel while both remain in circulation. For an accounting, lending or reporting system this is not a background fact. It is a field that carries meaning and must be enforced at every boundary.

An amount without a denomination is not an amount. Where AI assists in extracting figures from documents, reconciling ledgers, computing exposure, scoring credit, drafting a supervisory return or answering a question about a balance, the platform validates that currency is explicit and consistent before the model runs, validates what comes back against the institution's own rules, and refuses rather than guesses where a denomination is ambiguous. Every call writes an immutable audit row, and anything that would change a reported figure escalates to a person. The failure mode here is silent and expensive: a number that is right in one currency and wrong in the other, carried forward into a return that a supervisor will read.

Rice, pepper and agricultural exports: origin and quality, evidenced

Milled rice, cassava, maize, rubber, fish and horticultural products move to European, Chinese and regional markets, and Cambodia holds registered geographical indications including Kampot pepper and Kampong Speu palm sugar. Access to these markets is documentary as much as commercial: origin certification, phytosanitary certificates, residue and quality testing, mill and warehouse traceability, and the certification schemes buyers require. Preferences here are also reviewed, and safeguard measures applied to Indica rice imports from Cambodia and Myanmar from 2019 were subsequently the subject of legal proceedings.

A geographical indication or an organic claim is only as strong as the chain of records behind it, from the farmer group through the collector, the mill and the exporter. Where AI assists in matching lots, checking a certification claim, classifying a testing result, forecasting yield or preparing export documentation, validation runs before the model call and against what comes back, an audit row is written for every call, and the answer escalates to a person wherever it would support or deny a claim made to a customer or an authority. A traceability claim that cannot be re-derived from its source records is an assertion, not evidence.

Angkor and the heritage record under international coordination

Angkor is a UNESCO World Heritage site, managed by a national authority and coordinated through a long-standing international committee in which UNESCO and partner states take part; Preah Vihear, Sambor Prei Kuk and Koh Ker are inscribed as well. That framework means conservation decisions, excavation records, condition surveys, restoration methodology, visitor management and the movement of objects are documented for an audience that includes national authorities, international experts and scholars who will read them decades from now.

Heritage records are also provenance records, and provenance is contested territory: restitution claims and questions about the history of objects held abroad are answered from documentation. Where AI assists in cataloguing, condition monitoring from imagery, translating and indexing archival material, modelling visitor pressure or matching an object to an excavation record, the platform validates inputs, validates outputs against the institution's own rules, records the model version that produced the answer and writes an immutable row for every call. An interpretation that cannot be traced to its source is not a basis for a conservation decision or a provenance conclusion, and archives that will be read long after their authors have moved on have to be readable in Khmer as well as in the languages of the partner institutions.

Construction, land and building safety in Phnom Penh and Sihanoukville

Construction and real estate have been among the fastest-moving parts of the economy, concentrated in Phnom Penh and, following the growth of the port and special economic zone, in Sihanoukville. Building permits, land titling and cadastral records, construction standards and inspection sit with the land management, urban planning and construction administration under a construction law adopted in 2019, and building safety has drawn sustained official attention after serious incidents on construction sites.

These are records with physical consequences. Permit files, structural design and calculation, materials certification, inspection reports, occupancy approvals, land title chains and mortgage registration all determine whether a building is safe and whether an ownership claim holds. Where AI assists in reviewing drawings, classifying inspection findings, extracting data from title documents, scoring project risk or drafting a permit submission, validation executes at the call, an immutable row is written for it, and any output that would support an approval, a certification or a title determination escalates to a named professional who carries the responsibility. A model may assist the engineer; it does not replace the signature.

Khmer-language governance, personal data and digital administration

Governance in Khmer is not a localization detail. Policy definitions, refusal messages, escalation notices and audit records have to be readable in Khmer by the people who are accountable for them, in a script with its own rendering, sorting and search behaviour, and an audit record that only its authors can read is not an audit record. Public services, tax filing, customs declaration, civil registration and identity programmes are moving onto digital platforms, and the same institutions hold health, student and social assistance data.

A personal data protection law has been in preparation for several years and is not yet in force, so it is fairer to describe the regime as evolving than as settled; e-commerce, consumer protection and sector rules apply in the meantime, alongside the contractual data commitments that international buyers and lenders already require. Wherever AI touches a citizen or customer file, the platform enforces minimization and role-scoped access at the point of capture, validates outputs against the institution's own rules before they reach a decision-maker, escalates to a person wherever a determination affects an individual's entitlement, and writes an immutable row for every call. Building that in now is cheap; retrofitting it when a law comes into force is not.

On-premise deployment inside Cambodian facilities

Enforcement, inference and audit logging run inside the institution's own environment — a data centre in Phnom Penh, a factory in a special economic zone, a bank, a mill in Battambang, a conservation office in Siem Reap. Data does not leave the perimeter in order to be processed, which is the only version of data residency that actually holds.

Air-gapped operation as a supported configuration

For payment and settlement records, supervisory returns, worker files, land titles or archaeological archives, deploy with no outbound path at all. The platform does not phone home for telemetry, licence checks or model routing, so an air gap is a supported configuration rather than a degraded one.

Offline-capable enforcement across provinces and border posts

Governance does not pause when connectivity does. On a factory floor, at the Poipet or Bavet crossing, at a rice mill, at a provincial land office or on an excavation site, validation still executes and the ledger still writes, and records created while disconnected reconcile cleanly when the link returns.

Jurisdictional residency for buyers, lenders and cross-border payments

European due diligence, buyer audits, lender reporting and cross-border payment links each touch more than one legal regime. Deploy so that data governed by Cambodian rules stays where those rules require, with jurisdiction-specific policy enforced at the same chokepoint rather than in separate systems that drift apart.