AI security and governance for enterprises in Japan
Japan chose promotion over prohibition, which puts the burden of proof on the enterprise. Kapālins gives Japanese groups and the foreign companies operating in Japan an inventory of every AI they run and evidence that each follows the APPI and the METI guidelines.
What changes for Japan enterprises, and when.
The AI Promotion Act has been fully in force since 1 September 2025 and the Cabinet adopted the AI Basic Plan under it on 14 July 2026. The 2026 amendments to the APPI bring strengthened criminal penalties from 17 January 2027, with the main reforms following by July 2028. Japanese boards face the same question as everywhere else, in a market where enforcement arrives through reputation as much as fines.
- In force
AI Promotion Act (Law No. 53 of 2025) fully in force. A promotion-first law with few enforceable duties; it sets the governance expectation that the APPI and sector rules then enforce. Source (secondary)
- In force
Cabinet adopts the AI Basic Plan under the AI Promotion Act. Sets national priorities that ministries and large enterprises align procurement to. Source (secondary)
- In force · upcoming
Strengthened criminal penalties under the 2026 APPI amendments commence. Main reforms follow by 17 July 2028. Source (secondary)
Dates: each entry links to its source. A source marked secondary is a law firm, analyst or vendor summary; check the primary text before relying on the date. The full calendar is on the AI regulation tracker.
Mapped on the platform for Japan.
Every framework page says which controls are proved by a live signal from the gateway, probes or device sensor, and which by assessment evidence. Both are exported in the regulator evidence pack.
Hosting and residency.
Today the platform and its data are hosted in Australia. A Sovereign plan for on-premises or air-gapped deployment is announced as coming soon.
Industries and cities.
Questions buyers in Japan ask.
Is Kapālins available in Japan?
Yes. Kapālins is delivered remotely from Melbourne, Australia, and through partners in the Authorised, Premier and Elite tiers. Organisations in Tokyo, Osaka are served in the same way: a briefing on your own estate, then onboarding.
Which Japan frameworks does the platform map?
APPI, AI Promotion Act, METI AI Guidelines, ISO/IEC 42001, ISO/IEC 27001, SOC 2. Each framework page lists the controls mapped and whether a control is proved by a live platform signal or by assessment evidence.
Where is our data hosted?
Today the platform and its data are hosted in Australia. A Sovereign plan for on-premises or air-gapped deployment is announced as coming soon.
Is the platform available in Japanese?
The platform and this site are in English today. The three Japanese frameworks are mapped control by control on their framework pages; ask about language support for your users.