Artificial Intelligence Technology
Choosing the right AI platform for your business: Copilot, ChatGPT or Custom AI Solutions

When it comes to Australian Government Agencies, Defence Industry Partners, and APRA-regulated Financial Institutions handling PROTECTED-level data, compliance clarity is everything.

Microsoft Azure currently holds the strongest and most mature position for regulated AI workloads.

In February 2024, Microsoft became the first hyperscaler to complete an IRAP assessment at the PROTECTED level that explicitly includes both Azure OpenAI Service and Copilot for Microsoft 365. This milestone gives Australian public sector and critical infrastructure organisations a clear, well-documented compliance pathway for deploying enterprise-grade generative AI today.

AWS Bedrock is a very close second and rapidly catching up.

Amazon Bedrock is available in the Sydney region and supports leading models, including Anthropic Claude, Meta Llama, and Amazon Titan. Bedrock was formally added to AWS’s IRAP PROTECTED scope in the August 2024 assessment and remains covered in all subsequent reports (now 168+ AWS services assessed at PROTECTED). As with all cloud services, agencies should download the latest IRAP package from AWS Artefact and confirm model-specific controls align with their risk posture.

Direct OpenAI services (ChatGPT Enterprise or OpenAI API) are not currently IRAP-assessed.

While OpenAI introduced Australian data residency for at-rest storage in 2024, there is still no IRAP assessment or certification for the OpenAI platform itself. For workloads subject to the Australian Government Information Security Manual (ISM), PSPF, or APRA CPS 234, organisations typically need to use Azure OpenAI Service (which benefits from Microsoft’s IRAP coverage) rather than connecting directly to api.openai.com.

Bottom line for Australian regulated entities in late 2025:

Need guaranteed IRAP PROTECTED coverage today with the broadest service inclusion → choose Microsoft Azure OpenAI and Copilot for Microsoft 365.

Happy to validate the latest AWS IRAP package and comfortable with Bedrock’s control set → AWS is now a very strong and compliant alternative.

Comparison of enterprise AI platforms at a glance comparing MS Copilot, ChatGPT Enterprise, AWS Bedrock custom AI solutions

Author

Jesse