EAAPLEnterprise AI Architecture Pattern Library

Pattern Library · v1.0

Enterprise AI Architecture Patterns

110 patterns across 13 domains — governance, security, compliance, RAG, and agentic AI. Mapped to APRA, EU AI Act, ISO 42001, NIST AI RMF, and GDPR.

Explore 110 Patterns Browse by Domain

CoversAPRA CPS230APRA CPS234EU AI ActISO/IEC 42001NIST AI RMFPrivacy Act (AU)GDPR

Where most teams begin

Three foundational patterns

Build these before anything else. They underpin every other pattern in the library.

AI GovernanceMature

AI Model Register

The AI Model Register is the foundational governance artefact for any enterprise…

APRA CPS230EU AI Act+2

Where every AI programme begins — a single source of truth for all models in production.

AI SecurityMature

AI Gateway

The AI Gateway pattern establishes a centralised, enterprise-grade control plane through which…

APRA CPS234EU AI Act+2

The security perimeter every enterprise AI deployment requires before anything else goes live.

Retrieval-Augmented GenerationMature

Enterprise Retrieval-Augmented Generation

Retrieval-Augmented Generation (RAG) is the foundational architecture pattern that grounds Large Language…

APRA CPS234EU AI Act+2

The grounding architecture that eliminates hallucinations and enables auditable AI responses.

View all 110 patterns →

By Role

Find your reading path

Start with the patterns most relevant to your function.

CIO / CTO

Governance, risk posture, and platform strategy.

Enterprise Architect

Platform design, integration, and system composition.

Security Architect

Zero-trust AI, input/output defence, and secrets.

AI Governance Lead

Model risk, policy enforcement, and regulatory compliance.

Platform Engineer

API gateways, cost control, observability.

Compliance Officer

APRA, EU AI Act, ISO 42001, GDPR, and NIST.

Architecture Domains

13 domains

From foundational governance to agentic orchestration.

Agentic AI

Autonomous agents, tool registries, sandboxing, and agent identity

Regulatory Compliance

APRA CPS230/234, EU AI Act, ISO 42001, NIST AI RMF, and GDPR frameworks

Data Architecture

Training data governance, lineage, quality, and privacy-by-design

AI Governance

Model lifecycle, risk classification, policy enforcement, and audit trails

Human-in-the-Loop

Approval gateways, override patterns, confidence routing, and feedback loops

AI Integration

Service buses, circuit breakers, legacy augmentation, and batch processing

Knowledge Management

Knowledge graphs, corpus management, vector databases, and semantic layers

Model Management

Versioning, rollback, canary releases, fine-tuning, and ensemble patterns

Multi-Agent Systems

Orchestration, swarm patterns, debate agents, and handoff protocols

Observability & Monitoring

Telemetry, drift detection, hallucination monitoring, and cost visibility

Platform Engineering

API gateways, cost control, developer portals, caching, and multi-tenant platforms

Retrieval-Augmented Generation

Retrieval architectures, vector search, grounding, and citation infrastructure

AI Security

Zero-trust pipelines, input/output defence, secrets management, and access control

Compliance Mapping

Regulatory coverage

Every pattern is mapped to applicable frameworks. Demonstrate compliance readiness from day one.

Regulation	Scope	Patterns
APRA CPS230	Operational Resilience	18+
APRA CPS234	Information Security	12+
EU AI Act	High-Risk AI Obligations	20+
ISO/IEC 42001	AI Management System	25+
NIST AI RMF	AI Risk Management	20+
Privacy Act (AU)	Data Privacy	15+
GDPR	Data Protection	14+

View Compliance Patterns →